SCO  targets  users  The  company  gets  ready  to  issue 

invoices  to  Linux  shops  to  protect  intellectual  properly.  PAGE  8. 


Readers  react  Mark  Gibbs'  recent  column  on  the  MCI 

affair  draws  a  variety  of  reader  responses.  PAGE  43. 
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CSI:  Lost  emails 


o  matter  how 
squeaky  clean  your 
company  is,  sooner 
or  later  you’ll  face  le¬ 
gal  action  that  will 
require  you  to  pro¬ 
duce  e-mails  dating 
back  years.  If  digging 
thrpugh  thousands 
of  baick-up  tapes  is 
too  daunting  a  task, 
there  are  forensic 
experts  who  will  sift 
through  your  elec- 


nic  data  and  pull 
out  the  relevant 
bits  of  evidence. 
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Utility  computing 
plans  take  shape 


Microsoft  begins  to  flesh  out 
ambitious  management  platform. 

B  BY  JOHN  FONTANA 

Microsoft  last  weekshipped  one  of  the  first  tools  in 
the  company’s  wide-ranging  portfolio  designed  to 
create  a  comprehensive  platform  for  managing 
computing  resources. 

The  company  made  available  for  free  its  Auto¬ 
mated  Deployment  Services  (ADS),  which  supports 
the  automated  and  simultaneous  installation  of 
Windows  2000  and  2003  on  networked  servers. 

But  ADS  is  just  the  beginning  of  an  ambitious 
multi-year,  multi-stage  plan  Microsoft  unveiled  in 
March  called  the  Dynamic  Systems  Initiative  (DSI). 
The  plan  is  designed  to  create  a  platform  for  a  self¬ 
managing  environment  built  around  applications 
that  can  communicate  their  management  needs  to 
the  network. 

Experts  say  if  Microsoft  fulfills  its  DSI  plan,  the 
company  will  become  more  competitive  in  corpo¬ 
rate  data  centers.The  company  has  committed  $1.7 
billion  in  research  and  development  this  fiscal  year 
for  DSl-related  technologies. 

The  software  giant  is  trying  to  keep  pace  with  rivals 
HP  IBM  and  Sun.  All  three  have  evolving  complex 
strategies  to  create  management  environments  that 
would  let  systems  adapt  to  change  by  dynamically 
allocating  resources  and  installing  software. 

See  Microsoft,  page  68 


HP  and  other  vendors  bolster 
product  plans  via  acquisitions. 


Utility  power 

In  a  survey  of  675  IT  execu¬ 
tives,  SG  Cowen  found  IBM  and 
HP  at  the  top  of  respondents’ 
list  of  utility-computing  ven¬ 
dors  they’d  employ. 

Other 

10% 


B  BY  DENISE  DUBIE 

High-tech  heavy¬ 
weights  determined 
to  deliver  on  utility 
computing  con¬ 
tinue  to  pull  out 
their  checkbooks 
for  key  technologies 
they  hope  will  fill 
out  their  product 
lines. 

The  buying  spree 
continued  last  week 
as  HP  said  it  plans 
to  acquire  Talking 
Blocks,  a  maker  of 
Web  services  man¬ 
agement  software. 

HP  last  month 
bought  Extreme  Logic,  a  consulting  firm  that  spe¬ 
cializes  in  Microsoft  .Net  applications  and  infra¬ 
structure.  HP’s  moves  are  part  of  a  trend  that  in  the 
last  12  months  saw  competitors  IBM,  Sun  and  Veritas 
Software  spend  millions  of  dollars  to  buy  nine  com¬ 
panies  between  them  —  all  in  the  name  of  utility 
computing. 

See  Utility,  page  66 
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Novell  NetWare  6.5 


With  NetWare  6.5,  Novell  does  a 
good  job  integrating 
open  source  add-ons. 
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Microsoft  Exchange 
Server  2003  Page@ 

Exchange  Server  2003  offers  new  security 
and  anti-spam  features,  better  performance. 


— — ■ 


The  right  software  can  transform 
your  infrastructure  into 
an  on-demand  environment. 


The  difference  between  a  successful  business  and  an  uncontrolled,  unresponsive 
enterprise  is  simple.  It's  all  in  the  software.  With  the  right  management 
software,  seamlessly  integrated,  you  can  now  have  more  control  than  ever  over 
your  entire  IT  environment.  You  can  make  sure  that  all  your  company's  vital 
information  is  not  only  organized  and  stored  efficiently,  but  also  completely 
secure.  You  can  get  the  big  picture  across  your  whole  organization,  allowing 
you  to  make  sound  business  decisions  and  move  ahead  with  confidence.  And  you 
can  decrease  both  hardware  and  labor  costs  Unicenter® 

Infrastructure  Management  Software 


while  increasing  ROI.  Best  of  all,  you  can  do  it 
by  maximizing  many  of  your  existing  resources, 
not  ripping  and  replacing.  To  find  out  more 
about  making  the  most  of  your  IT  capabilities, 
go  to  ca.com/management2. 


BrightStor® 

Storage  Management  Software 

eTrust™ 

Security  Management  Software 

All  Fusion™ 

Life  Cycle  Management  Software 
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Ripple  expected  from  patent  case 

■  Companies  with  products  that  work  on  the  Internet  are  waking 
up  to  the  implications  of  a  recent  judgment  against  Microsoft  in  a 
patent  infringement  case.  The  $520  million  award  to  Eolas 
Technologies  and  the  University  of  California  stemmed  from  a  1999 
lawsuit  in  which  Eolas  and  UC  charged  Microsoft  with  infringing  on 
a  1998  patent  owned  by  the  university  and  licensed  to  Eolas.  That 
patent,  which  Eolas  President  Michael  Doyle  developed  at  UC  San 
Francisco,  covers  technology  that  lets  applets  or  plug-ins  be  embed¬ 
ded  in  Web  pages  and  interacted  with  through  Web  browsers  such 
as  Internet  Explorer.  In  response  to  the  judgment  against  it,  Micro¬ 
soft  said  last  week  it  will  be  making  changes  to  Internet  Explorer 
that  might  affect  a  “large  number  of  existing  Web  pages,”  the  World 
Wide  Web  Consortium  said  in  a  statement.Technology  and  legal  ex¬ 
perts  agree  that  the  ruling  could  affect  a  range  of  companies  with 
products  that  interact  with  Web  browsers  or  services  that  rely  on 
customer  interaction  through  Web  browsers. 

Nortel  lands  billion-dollar  Verizon  Wireless  deal 

■  Verizon  Wireless  has  awarded  Nortel  a  $1  billion  multiyear  contract  to  supply  equip¬ 
ment  for  upgrading  and  expanding  Verizon’s  nationwide  network.  Verizon  Wireless  plans 
to  deploy  CDMA2000  IX  radio  base  stations,  switching,  Passport  IP  platforms  and  other 
related  equipment  from  Nortel  in  Atlanta,  Cleveland,  Detroit,  Las  Vegas,  Los  Angeles  and 
San  Diego.The  agreement  also  includes  a  market  build-out  and  deployment  of  CDMA2000 
IX  technology  in  Myrtle  Beach,  S.C.The  upgrades  are  designed  to  provide  more  network 
capacity  for  digital  voice  and  high-speed  data  services  such  as  Web  browsing,  streaming 
audio  and  video,  multimedia  messaging,  m-commerce  and  VPNs.Verizon  Wireless  has  the 
largest  nationwide  wireless  voice  and  data  network  with  34.6  million  customers. 

MCI  appoints  five  to  board 

■  MCI,  legally  known  as  WorldCom,  is  appointing  five  new  members  to  its  board  of  direc¬ 
tors.  The  appointments  will  become  official  when  the  carrier  emerges  from  bankruptcy 
protection.  W  Grant  Gregory,  former  chairman  at  Touche  Ross;  Judith  Haberkorn,  retired 
executive  from  Bell  Atlantic;  Laurence  Harris  from  Patton  Boggs;  Eric  Holder,  former  U.S. 
Deputy  Attorney  General;  and  David  Matlin.CEO  at  MatlinPatterson  Global  Advisers,  will 
join  the  board.  MCI  also  plans  to  appoint  a  chairman  of  the  board.  CEO  Michael  Capellas 
currently  also  holds  that  title. 

Survey  finds  identify  theft  surge 

a  More  man  27  million  U.S.  residents  have  been  victims  of  identity  theft  during  the  past 
:  •  >  r>  according  to  a  survey  the  Federal  Trade  Commission  released  last  week,  but  the 

COMPENDIUM 

VoIP  over  wireless 

PIT  to  >u‘ey  is  experimenting  with  it  “The  problem  is  my  wireless  connection.  Right  now, 

I  get  between  20' « to  30%  packet  loss  when  the  connection  works.  That  doesn't  make 

for  a  gooc  phone  call.  Read  more  at  www.nwfusion.com,  DocFinder:  7535. 
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■  Th  Good  BadThellgly 


The  World  Wide  Web  is  not  enough. 


James  Bond  has  defeated  yet  another  foe.  This 
time,  Bond  actor  Pierce  Brosnan  has  won 
a  legal  challenge  vs.  a  company  that 
owned  the  piercebrosnan.com  Web 
site  for  the  purposes  of  redirecting 
visitors  to  a  commercial  site,  according 
to  a  Reuters  report,  In  awarding  Brosnan 
rights  to  his  domain  name,  the  World  In¬ 
tellectual  Property  Organization  said  the 
behavior  of  the  renowned  cybersquatter 
whom  Brosnan  squared  off  against 
“constitutes  a  pattern  of  conduct 
intended  to  capitalize  on  the  goodwill 
associated  with  others'  fame  for  its 
own  illegitimate  purposes."  > 

Bad  day  at  the  Office. 

Microsoft  gave  the  open  source  camp 
something  new  to  smile  about  last  week 
when  it  warned  of  several  newly  discovered 
Raws  in  its  Office  program,  including  a 
"critical"  one  involved  with  technology  for 
running  custom  applications  on  Office.  The 
software  company  issued  patches  and 
urged  customers  to  take  advantage 
of  them  as  soon  as  possible. 


BRIAN  GAIDRY 


Oh,  c'mon  now.  A  recent  online  survey  of  28,000  e-mail  users  conducted 
by  Yahoo  Mail  reports  that  three  out  of  four  Rnd  Rushing  spam  from  their  in-box 
to  be  more  aggravating  than  cleaning  a  toilet.  . . .  Forced  to  choose  for  real,  how 
many  do  you  think  might  actually  grab  a  brush? 


agency  is  unsure  how  many  of  those  crimes  happened  through  technological  means. 
After  conducting  a  phone  survey,  the  FTC  estimates  that  9.9  million  U.S.  residents  have 
been  victims  of  identify  theft  during  the  past  year. The  survey  of  more  than  4,000  adults  is 
the  first  comprehensive  attempt  by  the  U.S.  government  to  learn  the  number  of  victims. 
The  FTC’s  numbers  are  higher  than  most  previous  estimates.  A  Gartner  survey  released  in 
July  found  7  million  victims  of  identity  theft  in  the  previous  year,  while  the  FTC  received 
about  380,000  complaints  about  identity  theft  in  2002.  Last  week,  the  Information 
Technology  Association  of  America  launched  the  Coalition  on  Online  Identity  Fraud  to 
combat  identity  theft  online. 

SIP  to  be  put  to  test  at  show 

■  More  than  20  vendors  of  Session  Initiation  Protocol-enabled  products  will  join  in  an 
interoperability  demonstration  to  show  customers  what  their  offerings  can  do. The  SIFbp 
booth  at  the  Fall  2003  VON  trade  show  Sept.22-25  in  Boston  is  scheduled  to  include  a  vari¬ 
ety  of  products,  including  videoconferencing  systems,  phone  services  software  and  media 
servers.’The  goal  is  to  show  how  applications  can  be  supported  seamlessly  across  multi- 

i  pie  platforms,”  says  Carl  Ford,  who  is  helping  organize  the  event  for  the  show  producer. 
Pulver.com.  “This  is  a  significant  display  that  SIP  is  readily  available  for  people  to  pur- 
chase.”SIPa  real-time  communication  protocol,  enables  peer-to-peer  style  communication 
among  devices  on  an  IP  network,  making  it  possible  to  put  much  of  the  call  intelligence 
within  end  devices, such  as  phones. 

Zix  buys  Elron  Software 

■  Zix,  which  provides  e-mail  encryption  services  and  content  filtering,  last  week  acquired 
Web  content-filtering  vendor  Elron  Software  for  about  $7  million  in  a  stock-based  trans- 
action.The  acquisition, subject  to  shareholder  approval,  is  expected  to  give  Zix  more  than 
4,500  new  customers,  including  Eli  Lilly,  20th  Century  Fox,  Anheuser-Busch,  CVS,  Texaco 
and  Time  Warner. 
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a  higher  plane 
of  communication 


SAY  THE  BUSIEST  CONTACT  CENTER  at 

Dana  Brake  &  Chassis*  crashes  and  is  fixed 

remotely  before  a  single  customer  order  is 

dropped.  Before  anyone  at  Dana  is  even  aware 

of  a  problem.  Did  a  problem  ever  exist?  In  the 

state  of  Avaya,  our  EXPERT  Systems5"  remote 

monitoring  and  maintenance  solutions  resolve 

96%  of  all  alarms  remotely.  Nobody  has  our 

patented  leading-edge  diagnostic  tools,  including 

proactive  trouble  resolution.  And  our  Avaya 

Global  Services  professionals  bring  a  single  point 

of  accountability  to  multi-vendor  communication 

environments.  That’s  reassuring  when  you’re  a 

Fortune  500®  company  whose  customers  demand 

overnight  delivery  from  an  inventory  of  450,000 

auto  parts.  See  why  no  one  else  comes  remotely 

close  to  maximizing  your  network  investment  at 

avaya.com/services.  Or  call  866-GO  AVAYA  today. 

IP  Telephony 

Contact  Centers  Unified  Communication 

Services 
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AVAYA  REMOTE  MONITORING  FIXES 

Dana  Brake  &  Chassis’ 


befjore  anyone  hears  an  alarm. 


NETWORK  CRASH 
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SCO  readies 
invoices  for  Linux 


■  BV  JENNIFER  MEARS 

In  its  ongoing  battle  to  protect  its  intellectual  property  The  SCO  Group 
is  stepping  up  its  focus  on  corporate  Linux  users. The  software  maker 
now  plans  to  send  invoices  to  companies  in  an  effort  to  levy  fees  for 
the  use  of  Linux,  which  SCO  says  illegally  contains  its  copyrighted 
Unix  code. 

The  plan  escalates  a  program  the  company  launched  in  August  in 
which  it  urged  customers  using  Linux  based  on  Kernel  2.4  or  higher  to 
buy  the  SCO  Intellectual  Property  License  for  Linux.The  license,  which 
is  being  offered  for  $700  per  CPU  until  Oct.  15  (when  the  price  will  dou¬ 
ble),^  aimed  at  getting  customers“clean”and  “square”  with  Linux  “with¬ 
out  having  to  go  into  the  courtroom,”  says  SCO  CEO  Dari  McBride. 

The  invoices,  which  will  be  sent  sometime  this  month  or  next, “help 
formalize  the  process  of  buying  a  license,”  says  Blake  Stowell,  a 
spokesman  for  SCO.  It  wasn’t  clear  how  SCO  would  determine  the 
invoice  charges. 

“We  are  doing  a  lot  of  research  on  who’s  using  Linux  and  where 
they’re  using  it.  Beyond  that  1  don’t  have  any  other  details  as  to  how  we 
may  invoice  companies,” Stowell  says. 

Users  seem  unfazed  by  this  latest  twist  in  SCO’s  battle  to  protect  its 
intellectual  property  rights  that  began  in  March  with  a  lawsuit  against 
IBM.The  battle  has  since  escalated  into  a  skirmish  with  corporate 
Linux  users.  Most  users  say  they  wouldn’t  consider  paying  SCO;  oth¬ 
ers  say  they  might  pay  up  just  to  get  rid  of  the  headache. 

“If  you  think  about  how  little  you  pay  for  Linux  as  it  is,  $699  for  a  box 
just  to  not  have  to  deal  with  it  is  not  that  bad,”  says  an  IT  executive  who 

asked  not  to  be  named.  “For  me, 
the  issue  is  it’s  an  annoyance.” 

The  user  says  he  hasn’t  offered 
to  buy  an  IP  license  for  Linux,  but 
■  Read  Mark  Gibbs'  open  if  an  invoice  arrived  on  his  desk 

letter  to  SCO  Linux  he’d  pay  “For  anything  less  than 

licensees.  PAGE  70.  $5,000, 1  would  just  pay  them  to 

i  See  SCO,  page  10 


Start-up  focuses  on  anomalies 


■  BY  ELLEN  MESSMER 

Start-up  System  Detection  this 
week  will  make  its  debut  with 
software  the  company  says 
stands  apart  through  its  use  of 
analytics  for  defining  and  cate¬ 
gorizing  threats  and  attacks 
coming  from  the  Internet  and 
inside  the  corporate  LAN. 

The  company’s  Antura  product 
includes  three  components  — 
the  Recon  Internet  gateway  LAN- 
based  Monitor  sensor  and  Threat 
Management  Center  manage¬ 
ment  console  —  that  work  togeth¬ 
er  to  give  companies  a  feel  for 
where  threats  and  attacks  origi¬ 
nate  and  to  help  them  prioritize 
their  response  (see  graphic). 

Antura,  which  customers  install 
on  Linux-based  machines,  relies 
on  anomaly  detection.  With 
anomaly  detection  the  devices 
can  analyze  suspicious  behavior 
based  on  patterns  and  knowl¬ 
edge  rather  than  signatures  of 
known  attacks. 

System  Detection  faces  the  hard 
task  of  distinguishing  itself  in 
what  Synergy  Research  Group 
says  is  a  $145  million  market  so 
far  this  year  for  intrusion-detec¬ 
tion  and  intrusion-prevention  sys¬ 
tems  (which  use  IDS  intelligence 
to  block  attacks  not  just  watch  for 
them).  The  biggest  player  in  this 
segmented  market  is  Internet 
Security  Systems,  although  Lan- 


Three-tier  defense 

System  Detection’s  Antura  intrusion-detection  system, 
consisting  of  three  separate  Linux  software  pro¬ 
grams,  looks  for  trouble  in  front  of  and  behind  firewalls. 


□r 

IT 

CL 

Threat 

management  | 
center 


Scans 

and 

attacks 


Corporate  network 

Recon  server 

Identifies  incoming  scans  and  attacks. 

Monitor  sensor 

Collects  threat  information  by  detecting  anomalies  on  the  corporate 
network. 

Threat  Management  Center 

A  management  console  that  gathers  information  collected  by  Antura ’s 
Recon  and  Monitor,  and  then  makes  sense  of  it  (such  as  by  ranking 
threats)  so  that  companies  can  fight  intruders  in  an  organized  fashion. 


cope  is  probably  among  System 
Detection’s  closest  competitors. 

“It’s  a  very  crowded  field  and 
this  type  of  anomaly  based  IDS  is 
tough  to  test  because  you’re  try¬ 
ing  to  prove  you  can  find  what 
may  be  a  threat  that’s  unknown 
and  not  based  on  a  signature,” 
says  Pete  Lindstrom,  an  analyst 
with  Spire  Security  But  with  false 
positives  still  a  problem  among 
many  products,  he  says  the  door 
isn’t  closed  to  newcomers  with 


Service  provider  expands  VPN  reach 


■  BY  DENISE  PAPPALARDO 

Service  provider  Netifice  Com¬ 
munications  is  expanding  its  net¬ 
work  to  offer  users  a  simpler  way 
to  securely  manage  remote  office 
connectivity 

The  company  says  it  will 
announce  this  week  a  deal  with 
New  Edge  Networks  that  expands 
Netif ice’s  DSL  reach  to  100  addi¬ 
tional  cities  served  by  New  Edge 
and  beefs  up  its  broadband  cov¬ 
erage  in  270  more. 

Netifice  offers  fully  managed 
VPN  services  using  its  national  IP 
backbone  and  partnerships  with 
about  20  DSL  and  cable  modem 
providers  and,  soon,  one  satellite 
service  provider. 

While  coverage  is  king,  we’re 
k  x  m-u  on  of f eri  ng  users  the  best 

iio.ce  to  meet  their  VPN  needs," 
sun  s  Gregory  Davis,  vice  president 
of  marketing  at  Netifice.  For 
example,  through  its  partnerships 
in  Washington,  D.C.,  Netifice  has 


15  DSL  providers  to  choose  from 
when  setting  up  VPNs. 

Netifice  is  expected  to  an¬ 
nounce  a  partnership  with 
Hughes  Network  Systems  that  will 
let  customers  also  use  Very  Small 
Aperture  Terminal  (VSAT)  satel¬ 
lite  connectivity  at  all  or  some  of 
their  sites.  Hughes  VSAT  services 
are  available  nationwide,  even  in 
the  most  rural  remote  sites  that 
are  often  impossible  to  service 
with  DSL  or  cable. 

All  Netifice  partners  standard¬ 
ize  on  Cisco  Efficient  Networks  or 
Netopia  customer  premise  equip¬ 
ment  that  has  been  tested  and 
certified  to  perform  well  with 
Netifice’s  backbone.  This  gear 
also  supports  IP  Security  tunnels 
for  secure  network  connectivity 

Standardizing  on  specific  ven¬ 
dors’  gear  makes  it  easier  for 
Netifice  to  get  a  full,  end-to-end 
view  of  each  customer’s  VPN 
using  its  SmartWorx  monitoring 
software  and  to  offer  standard 


Easing  VPN  management 

Netifice  offers  fully  managed  VPN  services  over  broad¬ 
band  connections  that  include  integrated  billing,  SLAs 
and  network  monitoring. 


Connection 

Monthly  price 

T-1, 1.544M  bit/sec 

$400* 

SDSL,  up  to  1.5M  bit/sec 

$120  to  $400 

ADSL 

$70 

Cable  modem 

$95 

*Plus  local-loop  fee  of  $150  to  $300  per  month. 

SOURCE:  NETIFICE 

service-level  agreements  (SLA), 
the  company  says. 

Netifice’s  claim  to  fame  is  its 
ability  to  offer  users  a  single  VPN 
that’s  fully  managed  and  moni¬ 
tored  as  if  it  were  one  network, 
even  though  10  or  more  service 
providers  might  provide  local  ser¬ 
vice.  And  the  company  offers 
SLAs  that  cover  its  last-mile  part¬ 
ner  networks.  The  standard  SLA 


guarantees  99.9%  network  avail¬ 
ability,  round-trip  network  latency 
that  does  not  exceed  160  millisec 
and  packet  delivery  that  does  not 
fall  below  99.7%. 

Network  reliability  was  one  of 
the  reasons  Chevys  Inc., the  com¬ 
pany  owns  Chevys  Tex  Mex 
restaurants,  selected  Netifice  for 
its  VPN  needs.The  majority  of  the 
See  Netifice,  page  14 


fresh  ideas. 

Antura,  which  starts  at  $20,000, 
isn’t  necessarily  intended  to  re¬ 
place  signature-based  IDS  offer¬ 
ings  that  customers  might  already 
use,  according  to  Dale  Gardner, 
System  Detection’s  vice  president 
of  marketing. 

“[Existing  IDS  products]  may  do 
a  good  job  of  telling  you  about 
threats  you  already  know,  but 
Antura  is  detecting  anomalies 
based  on  68  different  attributes, 
such  as  the  man-in-the-middle 
attack,  for  instance  —  someone 
trying  to  insert  themselves  into  an 
active  session,”  he  says. 

The  start-up  was  founded  by 
Columbia  University  computer- 
science  professor  Salvatore 
Stolfo,  who  has  a  background  in 
network  anomaly  detection 
research  that  was  funded  with  a 
Defense  Advanced  Research 
Projects  Agency  (DARPA)  grant, 
Columbia  University  owns  the 
rights  to  the  anomaly  detection 
technology  developed  under  the 
DARPA  grant,  but  has  licensed  it 
exclusively  to  System  Detection. 
The  company  has  24  employees 
and  $7  million  in  funding  from 
Metropolitan  Ventures  and  Novak, 
Biddle  Venture  Partners. 

Analysts  say  the  company,  would 
do  well  to  crack  the  government 
market.  The  company  might  have 
a  shot,  given  the  background  of 
CEO  and  President  Harvey  Weiss, 
the  former  head  of  research  and 
engineering  company  SAIC  and  a 
veteran  in  government  sector-ori¬ 
ented  divisions  at  Digital,  Trusted 
Information  Systems  and  Unisys” 
Lindstrom  says.  ■ 


Solution  ? 


Step  out  of  the  STONE  AGE  with  PowerQuest'  V2i  Protector" 


To  learn  more  and  download  a  free  IDC  whitepaper,  visit: 

www.powerquest.com/stoneage 

©  2003  PowerQuest  Corporation  PowerQuest  products  may  be  protected  under  U  S.  and  International  patent  law  or  pending  patents. 
PowerQuest  is  a  registered  trademark,  and  V2iTechnology  is  a  trademark  of  PowerQuest  Corporation  in  the  United  States  and  elsewhere 


Global  Deployment  and  Recovery  Automation 


Stop  relying  on  old  technology  to  protect  your 
servers  and  desktops.  It  leaves  your  company’s  mission 
critical  data  unprotected  and  exposed  to  permanent  loss. 
Today’s  tape  backup  and  recovery  solutions  are  often: 
Slow  -  taking  all  night  to  back  up  your  servers  and  more 
than  four  hours  or  longer  to  restore  an  individual  system. 
Expensive  -  requiring  expensive  software  plug-ins, 
dedicated  hardware  and  highly  skilled  technicians. 
Unreliable  -  ignoring  critical  data  leaving  you  with 
incomplete  backups  and  unsuccessful  recoveries. 


Why  try  to  reinvent  the  wheel  using  outdated  technology 


like  tape  backup? 
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Minutes! 


Hours  or  Days 


V2i  Protector 


Tape  Backup 


PowerQuest"  V2i  Protector 


-  Backup  Anything,  Anytime,  Anywhere. 

-  Restore  a  system’s  Active  State  in  Minutes ! 
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SCO 

continued  from  page  8 

make  it  go  awayf  he  says. 

Bill  Claybrook.an  analyst  at  the 
Aberdeen  Group,  says  paying 
such  a  tee  would  be  ridiculous  at 
this  point. 

It’s  foolish  for  anyone  to  go  out 
and  buy  licenses  for  Linux 
because  there  is  a  very  good 
chance  that  you  won’t  have  to  at 
all,”  he  says.  “And  if  you  do  have 
to.  it  isn’t  going  to  be  any  more 
than  it  is  now.  So  why  bother?” 

While  the  Linux  community  for 
the  most  part  has  scoffed  at 
SCO’s  efforts  to  charge  license 
fees  for  Linux,  the  company  says 
it  had  900  calls  in  the  first  week  it 
offered  the  license,  300  of  which 
were  companies  seriously  con¬ 
sidering  buying  a  license.  In  addi¬ 
tion,  at  least  one  company,  a 
Fortune  500  firm  that  SCO  would 
not  name,  has  purchased  a 
license  for“a  significant  amount.” 

SCO’s  lawsuit  against  IBM  isn’t 
scheduled  for  trial  until  April 
2005.  And  copyright  violations 
within  Linux,  which  might  affect 
commercial  Linux  users,  isn’t 
part  of  that  original  filing,  SCO’s 
Stowell  says. 

“The  trial  specifically  just 
addresses  Unix  derivative  code 
that  IBM  contributed  to  Linux,” he 
says.  “This  [SCO  Intellectual 
Property  Linux  License]  would 
certainly  cover  that,  but  in  addi¬ 
tion  the  license  also  covers  line- 
by-line  copying  of  direct  Unix 
System  code  from  Unix  into 
Linux.  We’ve  never  accused  IBM 
of  direct  line-by-line  copying.” 

Snippets  of  code  that  SCO  says 
are  in  violation  have  been  dis¬ 
counted  by  Linux  advocates 
who  say  the  code  at  issue  is 
legally  part  of  Linux.  Stowell 
says  customers  can  take  a  look 
at  the  code  in  question  — 
under  a  non-disclosure  agree¬ 
ment  —  and  then  make  up  their 
own  minds. 

“If  a  company  looks  at  that 
and  still  refuses  to  take  out  a 
license  it’s  very  possible  that  it 
would  be  at  that  point  that  we 
would  take  legal  action,”  he 
says.  “And  that’s  when  it  would 
probably  be  proven  in  a  court 
of  law." 

Meantime,  SCO  has  found 
itself  on  the  losing  side  of  a 
court  case  in  Germany  in  which 
it  was  fined  $10,000  for  continu¬ 
ing  to  include  a  letter  on  its 
German  Web  site  that  claims 
intellectual  property  violations 
in  Linux.  A  German  court  had 
ruled  that  SCO  could  not  make 
such  claims  without  corre¬ 
sponding  evidence  ■ 


Lotus  adds  IM  to  Notes  client 


■  BY  JOHN  FONTANA 

IBM/Lotus  later  this  month  will 
ship  Notes/Domino  6.5  and  begin 
to  show  corporate  users  how  to 
extend  the  reach  of  its  collabora¬ 
tion  software  by  embedding  it  in 
everyday  client  software. 

With  embedded  components 
users  can  stay  within  their  famil¬ 
iar  software  and  still  have  access 
to  collaboration  features  such  as 
instant  messaging. The  benefit  for 
IT  is  less  end-user  training,  less 
client  software  to  maintain  and 
better  ROI  in  collaborative 
software. 

The  6.5  release  is  focused  on 
the  Notes  client  and  highlights 
how  it  is  integrated  with 
instant  messaging  and  pres¬ 
ence  information  supported 
by  the  Lotus  Instant 
Messaging  and  Web  Confer¬ 
encing  Server.  Instant-mes¬ 
saging  capabilities  can  be  inte¬ 
grated  into  the  Notes  in-box, 
forms,  applications  and  databases 
without  the  need  for  a  separate 
client.  Later  this  year,  IBM/Lotus 
plans  to  add  Web  conferencing 
and  team  workplace  integration. 

What  Lotus  is  missing,  however, 
is  Web  services-based  integration 


New  look 


Lotus  later  this  month  will  release  Version  6.5  of 
Notes/Domino  that  will  include  integrated  instant¬ 
messaging  capabilities  to  eliminate  the  need  for  a 
separate  instant-messaging  client. 
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A  new  chat  feature  lets  a  user  start 
an  instant-messaging  session  using 
only  the  Notes  client. 
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A  new  feature  lets  users  mark 
messages  with  a  follow-up  flag. 
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with  applications  from  other  ven¬ 
dors.  The  instant  messaging  inte¬ 
gration  with  Notes/Domino  6.5 
doesn’t  go  beyond  Notes/ 
Domino  applications  and  IBM’s 
WebSphere  Portal  Server. 

Lotus  and  Microsoft  have  been 
promising  for  more  than  two 


IBM  racing  ahead  with  component  strategy 


With  Lotus  as  a  lead  example,  IBM  is  work¬ 
ing  to  break  down  the  other  software 
products  in  its  portfolio  into  sets  of  com¬ 
ponents  that  can  be  assembled  quickly  in  multi¬ 
ple  ways  to  meet  corporate  computing  needs. 

Danny  Sabbah,  the  CTO  of  the  IBM  software 
group,  says  the  goal  is  to  make  it  faster  and  less 
expensive  to  integrate  middleware  capabilities 
pulled  from  transaction  services  of  the 
WebSphere  Application  Server,  data  from  the 
DB2  database,  security  and  system  management 
services  from  Tivoli  and  collaboration  from  Lotus. 

“It  is  a  flavor  of  our  On-Demand  strategy,” 
Sabbah  says.  “We  are  trying  to  make  our  soft¬ 
ware  more  reactive  to  customer  needs  so  peo¬ 
ple  pay  a  lot  less  in  terms  of  underlying  labor 
for  dynamically  created  solutions  and  see  a 
decrease  in  the  amount  they  spend  to  integrate 
products." 

IBM  is  training  its  12,000  developers  to  use  a 
common  development  process  that  gets  away 
from  a  production-line  mentality  of  developing 
software  and  lets  developers  build  across  prod¬ 
uct  lines.  The  company  is  using  a  principle  it  calls 
progressive  discovery,  which  is  a  way  to  expose 
interfaces  needed  for  the  component  model. 

Big  Blue  says  it  hopes  middleware  components 
will  allow  for  the  flexibility  to  pull  together  quickly 


select  features  to  support  applications. 

For  example,  Sabbah  says  IBM  could  offer  a 
data-warehouse  bundle  that  will  pull  information 
from  various  sources  and  incorporate  compo¬ 
nents  of  WebSphere  for  transactional  integrity 
and  Tivoli  for  secure  access. 

Interest  in  componentization  has  been  gar¬ 
nered  lately  by  advances  in  Web  services  and  the 
evolving  set  of  open  standards  behind  the  tech¬ 
nology,  such  as  those  for  security  and  business 
process  workflow. 

To  support  component  integration,  IBM  also  is 
developing  an  architecture  called  the  Enterprise 
Services  Bus,  which  is  a  sort  of  integration  hub 
for  its  middleware  components  and  other  com¬ 
ponents  brought  together  as  part  of  a  Web  ser¬ 
vices  application,  especially  those  that  cross 
corporate  boundaries. 

“We  are  trying  to  figure  out  what  the  first 
release  needs  to  look  like,"  Sabbah  says. 

He  says  within  the  next  year  components  will 
help  define  how  IBM  middleware  supports  a  ser- 
vices-oriented  architecture,  which  is  basically  an 
infrastructure  for  tying  multiple  components  into 
one  application  or  to  support  a  workflow  that  exe¬ 
cutes  some  business  process,  such  as  approving 
a  ioan. 

—  John  Fontana 


years  to  deliver  a  set  of  compo¬ 
nents  from  their  respective  collab¬ 
oration  suites  that  can  be  used  to 
add  features  to  other  applications. 

The  concept  is  known  as  con¬ 
textual  collaboration,  which 
would  let  collaborative  features 
be  added  to  any  application.  For 


example,  an  instant-messaging 
component  could  be  used  in  a 
CRM  application  to  provide  an 
indicator  that  a  support  person  is 
online  and  foster  a  real-time  chat 
session,  all  within  the  CRM 
interface. 

“IBM/Lotus  has  institutionalized 
the  component  concept  better 
than  any  other  vendor/  says  Matt 
Cain,  an  analyst  with  Meta  Group. 
“But  the  focus  has  been  on 
[IBM/Lotus]  prod¬ 
uct-level  integration 
and  you  don’t  see  a 
deeper  integration, 
with  other  software 
based  on  Web  ser¬ 
vices  interfaces.” 

Without  Web  services  inter¬ 
faces,  users  will  be  hard  pressed 
to  easily  integrate  components 
across  various  vendors’  products. 

Cain  says  the  focus  on  instant 
messaging  in  Notes/Domino  6.5 
is  a  move  to  increase  momentum 
behind  Lotus’  5-year-old  instant¬ 
messaging  technology  before 
Microsoft’s  scheduled  release  on 
Oct.  21  of  Office  Live  Commun¬ 
ications  Server  for  IM,  Outlook 
2003  client  and  Office  2003  appli¬ 
cation  suite. 

Corporate  usage  of  instant  mes¬ 
saging  is  expected  to  increase 
from  60  million  users  today  to  349 
million  in  the  next  five  years, 
according  to  a  survey  in  June  by 
research  firm  The  Radicati  Group. 

The  Notes  6.5  client  is  high¬ 
lighted  by  the  fact  that  a  sepa¬ 
rate  instant-messaging  client  is 
no  longer  needed  as  was  the 
case  in  Notes  6.0. 

The  interface  has  four  new 
icons  that  allow  chat  sessions, 
instant  meetings  and  the  ability  to 
add  users  to  a  buddy  list  and 
hide/show  that  list  within  the 
client. 

The  instant-messaging  integra¬ 
tion  also  incorporates  presence 
information  into  the  Domino 
directory  or  any  Lightweight 
Directory  Access  Protocol-com¬ 
pliant  directory  that  lets  users 
see  who  in  the  company  is 
online,  not  just  those  on  their 
buddy  lists. 

The  instant-messaging  integra¬ 
tion  is  built  using  Domino  De¬ 
signer,  which  lets  developers  add 
presence  capabilities  to  any 
application  that  can  be  accessed 
by  the  Notes  client. 

Notes/Domino  6.5  will  ship  at 
the  end  of  the  month.  Pricing  is 
the  same  as  the  6.0  client,  which 
starts  at  $90  per  user  and  the  6.0 
server,  which  starts  at  $2,964. ■ 


ARE  THE  SEVEN  DEADLY  COMPUTING  SINS 
IMPACTING  YOUR  INFORMATION  SYSTEMS? 


Freeware  and  shareware 
are  crushing  your  network. 

r<u 

*  *  * 

Employee  desktops  are  out  of  control.  Turn  to 
Websense  Enterprise  to  save  your  systems 
from  the  viruses,  spyware  and  copyright  liability 
that  come  with  application  overindulgence. 

•  Block  access  to  freeware,  shareware  and 
P2P  sites 

•  Inventory,  manage  and  report  on 
desktop  applications 

•  Prevent  application  downloads  by  file 
type  or  protocol 

With  market  leading  Websense  Enterprise 
software  (source:  IDC),  employee  hoarding 
won't  cause  anymore  help-desk  headaches. 

Just  download  a  free,  30-day  trial  of 
Websense  Enterprise  at  www.websense.com 


NASDAQ:  WBSN 
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NETWARE  6.5 


NetWare  6.5  is  driven  heavily  by  Web 
interfaces,  its  improved  Virtual  Office 
application  (see  related  story  at 
www.nwfusion.com,  DocFinder:  7540), 
and  ties  between  eDirectory  and  the 
open  source  pieces  —  Apache,  MySQL, 
and  Perl/PHP  (AMP)  —  that  ship  with  it. 
Also  included  in  the  NetWare  6.5  devel¬ 
opment  platforms  are  TomCat,  Java  2 
Platform  Enterprise  Edition,  Novell’s 
Extend  application  server  platform  (from 
Novell’s  acquisition  of  SilverStream)  and 
its  DirXML  (parser  and  API  set).  These 
pieces  comprise  Novell’s  efforts  to  make 
NetWare  a  better  environment  for  build¬ 
ing  and  running  Web-based  applications. 

We  installed  NetWare  6.5  with  various 
options  on  a  number  of  servers,  ranging 
from  a  Gateway  1U  to  Compaq  DL360 
and  DL580  multi-CPU  servers  (see  How 
we  did  it,  DocFinder:  7541).  The  installa¬ 
tion  options  mime  functionality  found  in 
most  server  platforms,  such  as  DNS, 
Dynamic  Host  Configuration  Protocol 
and  certificate  management. 

Novell’s  hardware  discovery  processes 
worked  well  across  all  platforms  tested. 
However,  NetWare  doesn’t  try  to  make 
any  guesses  as  to  the  lab’s  network 


Net  Results 


OVERALL  RATING 

NetWare  6.5  4.13 

Company:  Novell  Cost:  Starts  at 
$995  for  a  new,  five-user  license. 

Pros:  Offers  unified  services  control; 
interesting  Web  applications  offered  with 
Virtual  Office;  open  source  services 
included.  Cons:  SlowerWeb 
performance  showing;  can  require 
significant  set  up  time  for  all  features. 


The  breakdown 

Installation/integration  25% 

4.5 

Performance  25% 

3.5 

Management  25% 

Security  25% 

4.5 

4.0 

TOTAL  SCORE 

4.13 

■  Scoring  Key:  5:  Exceptional;  4:  Very  good; 
3:  '.;e'Y:gt  2:  Below  average:  1:  Consistently 


NetWare  points  Novell  directly  toward  Linux 

■  BY  THOMAS  HENDERSON,  NETWORK  WORLD  GLOBAL  TEST  ALLIANCE 

Even  though  all  of  Novell’s  network  services  will  not  be  ported  to  Linux  until  late  this 
year,  in  our  testing  of  the  just-released  NetWare  6.5,  we  found  that  Novell’s  preliminary 
open  source  add-ons  are  well  integrated,  complemented  by  Novell’s  mature 
eDirectory  services  and  managed  comprehensively  by  NetWare  iManager  2.0. 


address  infrastructure,  unlike  Windows 
2003  and  a  number  of  Linux  versions, 
both  of  which  occasionally  misidentified 
network  routers,  and  other  services. 

Instead  of  managing  each  device  (hard 
disk,  tape  drive,  CD/DVD  and  so  on)  sep¬ 
arately  NetWare  can  aggregate  storage 
devices  and  areas  into  objects  called 
pools.  We  created  both  server-localized 
(local  hard  disk)  pools,  but  also  pools  of 
storage  across  the  lab’s  storage-area  net¬ 
work  (SAN)  using  various  file  systems 
and  disk/volume  combinations.  Al¬ 
though  NetWare  uses  its  own  filing  sys¬ 
tem  for  its  system  storage  area,  it  can 
mount  a  variety  of  filing  systems,  includ¬ 
ing  the  Common  Internet  File  System 
that  we  created  in  the  SAN.  Apple  File 
System  support  is  also  available,  and  we 
found  no  difficulty  either  deploying  or 
accessing  any  of  the  filing  systems  tested. 

Security 

NetWare  6.5  doesn’t  provide  a  firewall 
or  IP  Security  VPN  services,  but  network 
address  translation  and  port  blocking  are 
provided.  From  a  value  standpoint,  this 
compares  less  favorably  to  XServe  OS/X 
and  Linux,  which  contain  a  slightly 
stronger  firewall  and  a  variety  of  VPN 
methods,  and  somewhat  favorably  with 
Win  2003,  which  contains  nominal  fire¬ 
walling  and  comparatively  strong  VPN 
services. 

Client  logon  capability  can  use  many 
methods  from  simple  password  to  com¬ 
plex  password  to  certificate-based  in 
combination  with  biometrics/SmartCard 
authentication  techniques.  We  used  the 
X.509  certificates  with  little  setup  time, 
but  found  the  process  adds  about  10  sec¬ 
onds  to  any  logon. 

User  and  group  security  is  strong  in  Net¬ 
Ware  6.5  because  of  the  highly  articulate 
controls  within  iManager  2.0,  a  Web- 
based  central  console  for  almost  all  Net¬ 
Ware  services.  While  eDirectory  ties 
resources  in  ways  that  can  establish  and 
authenticate  identity,  the  iManager  aggre¬ 
gates  the  functionality  of  users,  groups, 
devices  and  directory  contexts  well. 

Administrative  control  through  iMan¬ 
ager  was  occasionally  sluggish,  but  it  was 
comprehensive  and  better  laid  out  than 
other  management  applications. 

Our  only  criticism  of  iManager  was  its 


brief,  poorly  linked  help  system.  And, 
alternative  browsers  (Opera  and  older 
Netscape)  aren’t  supported  by  the 
DirXML-driven  apps  and  servlets  used  by 
iManager,  thus  requiring  Internet 
Explorer  or  later  versions  of  Netscape. 

The  open  source  twist 

By  adding  AMR  Novell  has  linked  its 
foundation  of  mature  eDirectory  ser¬ 
vices  to  one  of  the  most  popular  open 
source  Web  applications  engines.  This 
combination  has  a  large  number  of  fol¬ 
lowers  in  the  open  source  community 
and  we  found  that  maintenance  of  the 
AMP  applications  (such  as  recompiling 
them)  is  no  more  difficult  than  it  is  on 
Linux  or  Berkeley  Software  Distribution. 
We  ported  several  scripts  from 
Linux/ Apache  and  ran  them  with  no  dif¬ 
ficulty  after  adjusting  the  scripts  for  the 
differences  in  file  locations.There's  even 
a  server  X  console  to  make  Unix/ 
Linux/BSD  programmers  and  adminis¬ 
trators  feel  at  home. 

The  AMP  combo,  often  found  on 
Linux  applications  servers  where  it’s 
known  as  LAMP  has  huge  popularity 
with  Web  and  applications  developers 
and  a  large  base  of  readily  available 
open  source  code.  We  were  disap¬ 
pointed  to  find  some  beta  products  in 
the  mix,  even  though  the  products  were 
at  the  current  release  levels. 

Performance 

We  subjected  NetWare  6.5  to  the  Web- 
Avalanche  test  environment  used  to  test 
Red  Hat  Enterprise  Linux,  SuSE/United- 
Linux  and  Win  2003  earlier  this  year 
(see  DocFinders:  7536  and  7537).  Net¬ 
Ware  scored  well  in  terms  of  transac¬ 
tions,  but  not  in  Web  IP  performance. 

NetWare  6.5  and  Apache  2.02  bettered 
Win  2003  in  number  of  transactions  per 
second.  But  in  maximum  number  of  TCP 
open  connections  and  maximum  num¬ 
ber  of  sustained  Web  connections, 
NetWare  6.5  scored  consistently  lower 
than  its  competitors. 

NetWare  6.5  is  a  stepping  stone  to 
NetWare  on  Linux.  While  the  grafted 
open  source  applications  might  not  be 
quite  as  speedy  as  we’d  like,  the  combi¬ 
nation  is  powerful.  In  some  ways,  the 
basic  infrastructure  to  NetWare  hasn’t 


. . . . 

Counting  Web 
performance  for 
NetWare  6.5 

In  our  tests,  NetWare  6.5 
running  Apache  held  its  own  in 
terms  of  Web  transactions,  but 
didn’t  score  as  well  in  Web  IP 
performance  against  Linux  or 
Windows  2003. 


Successful  transactions  per  second* 


«  NetWare  6.5 

■  Red  Hat  Linux  ‘Transactions  equals 

■  UnitedLinux/SuSE  successful  download 

■  Windows  2003  of  20. 4K  files. 

Note:  Linux  and  Windows  2003  results  achieved  in 

previously  published  tests  using  the  same  methodology. 

x _ _ _ 

changed  in  20  years,  but  the  direction 
toward  NetWare  as  an  open  source  plat¬ 
form  is  happening  quickly  and,  in  our 
opinion,  successfully 

Henderson  is  principal  researcher  for 
ExtremeLabs,  of  Indianapolis.  He  can  be 
reached  at  thenderson@extremelabs.com. 
is  a  member  of  the  Network  World  Global 
Test  Alliance,  a  cooperative  of  the  premier 
reviewers  in  the  network  industry,  each 
bringing  years  of  practical  experience  on 
every  review.  For  more  Test  Alliance  infor¬ 
mation,  including  what  it  takes  to  become 
a  member,  go  to  www.nwfusion.  com/ 
alliance. 
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ingenious  design  helps  keep  the  leader  pin  in  place  on  our  Ultrium  1  and  2  cartridges. 
So  if  they’re  ever  dropped  or  mishandled,  there’s  less  chance  your  data  will  be 
damaged.  And  then  there’s  our  DLTtape  cartridges.  We’ve  designed  the  tape  with  lower 
abrasivity,  so  there’s  less  wear  on  your  drive  heads.  It’s  all  part  of 
our  commitment  to  not  just  meet  industry  standards  but  to  continually  push  them 
higher.  For  more  information  on  Imation  Ultrium,  DLTtape  and  Super  DLTtape 
cartridges,  visit  www.imation.com/midrange  ADVANCING  DATASTORAGE 
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Enterasys,  Netgear  target  SMB  networks 


■  BY  PHIL  HOCHMUTH 

Enterasys  Networks  and 
Netgear  each  recently  debuted 
LAN  switches  aimed  at  scaling 
up  networks  in  small  and  mid¬ 
size  companies. 

Enterasys  introduced  Matrix 
V2,  a  fixed-configuration  stack- 
able  switch  that  could  be  used 
to  add  quality  of  service  (QoS) 
and  other  advanced  features  to 
small  business  networks.  Also, 
Netgear,  traditionally  a  con¬ 
sumer-focused  firm,  launched  its 
FS526T  24+2  Smart  Switch, 


■  BY  DENI  CONNOR 

Cisco  is  expected  to  introduce 
two  Fibre  Channel  switches  this 
week  that  will  give  users  more 
choices  for  expanding  the  size  of 
their  storage-area  networks. 

At  Storage  Decisions  2003,  the 
company  will  announce  the 
MDS  9100  series,  which  consists 
of  two  rack-mountable  1U,  2G 


Enterasys'  Matrix  V2  is  aimed  putting 
advanced  features  in  smaller  networks. 

aimed  at  the  same  customers: 
smaller  companies  looking 
to  add  advanced  LAN  traffic 
features. 

The  Enterasys  Matrix  V2  is  a  24- 
port  10/100M  bit/sec  Ethernet 
switch  with  two  Gigabit  Ethernet 
ports  for  connecting  to  a  LAN 


bit/sec  Fibre  Channel  switches 
available  in  20-  and  40-port 
models.  The  9120  and  9140 
Multilayer  Intelligent  fabric 
switches  are  installed  between 
smaller  Cisco  SN5428  Storage 
Routers  residing  on  the  edge  of 
the  network  and  midrange  16 
to  40  port  MDS  9216  Multilayer 
switches  or  MDS  9500  director- 
level  switches  located  in  the 


backbone  or  for  stacking 
Matrix  V2s.  (Eight  units  can 
be  stacked  and  managed  as 
one  device.) 

The  Enterasys  switch  also 
provides  features  such  as 
Layer  2  QoS  (802. Ip)  and 
virtual  LAN  (VLAN)  sup- 
port.The  box  can  classify  and  pri¬ 
oritize  Layer  2,  3  and  4  traffic 
based  on  such  data  as  packet  IP 
address,  media  access  control 
address  or  TCP/User  Datagram 
Protocol  (UDP)  port  information 
inside  the  packet. 

The  box  is  manageable  via 


data  center. 

“One  of  the  advantages  of  these 
switches  over  a  director-level 
switch  is  that  they  let  me  save 
money  and  buy  switches  that  are 
closer  to  edge-switch  pricing,” 
says  Barry  Brazil,  enterprise  archi¬ 
tect  for  Reliant  Energy,  an  energy 
company  in  Houston. 

“The  Cisco  MDS  9100s  are 
great  switches  for  workgroups 
as  well  as  departmental  stor¬ 
age,”  Brazil  says.  “For  instance, 
we  have  a  couple  of  sites  that 
hang  off  our  dense  wave  divi¬ 
sion  multiplexing  ring  where  it 
wouldn’t  be  prudent  to  put  a 
director-level  switch.  When  you 
are  talking  about  ancillary  stor¬ 
age,  it’s  a  good  idea  to  put  in 
switches  of  this  size  and  save 
money  on  port  cost.”  Brazil  has 
both  McData  Intrepid  Directors 
and  Cisco  MDS  9500  director- 
level  switches  installed. 

The  MDS  9120  and  9140  are  sim¬ 
ilar  to  Brocade  Communications’ 
16-  to  32-port  Silkworm  3800  and 
3900  and  McData’s  24-  to  32-port 
Sphereon  4500  and  3232.  Cisco 
differentiates  them  from  other 
switches,  however,  in  their  ability 
to  be  managed  by  much  the 
same  software  Cisco  users 
employ  for  the  company’s  net¬ 
work  routers  and  switches. 

Management  of  the  MDS  9100 
is  integrated  with  CiscoWorks 
and  has  a  Cisco  IOS-like  com¬ 
mand-line  interface.  In  addition, 
with  free  software  Cisco  in¬ 
cludes  with  its  Fibre  Channel 
switches,  customers  can  parti¬ 
tion  SANs  into  configurations 
resembling  virtual  LANs  for 
security  purposes. 

The  MDS  9100  switches  are 
expected  to  start  at  about 
$29,000  and  be  available  later 
this  month.  ■ 


SNMP  and  has  Web  interface 
and  Remote  Monitoring  capa¬ 
bilities.  Secure  Shell  and 
Secure  Sockets  Layer  support  is 
included  for  secure  device 
management,  and  802. lx  and 
RADIUS  support  for  securing 
both  wired  and  wireless  clients 
at  the  switch-port  level. 

Netgear  offers  a  similarly  built 
box,  with  24  10/100  ports,  but 
with  two  built-in  10/1 00/ 1 000M 
bit/sec  Ethernet  ports  for  net¬ 
work  or  server  uplinks.  The  box 
supports  features  such  as  802. Ip 
and  VLANs,  port  trunking  (for 
linking  separate  physical  ports 
into  a  faster  virtual  link),  and  a 
Web  browser  interface  for  con¬ 
figuring  and  managing  settings 
on  the  device. 

While  analysts  keep  predicting 
the  imminent  turnaround  for 
big-business  IT  spending,  net¬ 
work  vendors  on  both  the  large 
corporations  and  small  office/ 
home  office  ends  of  the  spec¬ 
trum  have  gone  after  smaller 
companies.  Cisco  has  led  a 
movement  among  large  enter¬ 
prise  network  vendors  of  mar¬ 
keting  toward  smaller  firms, 
along  with  its  acquisition  of 
commodity  network  vendor 
Linksys.  Dell  also  has  made  this 
a  focus  with  its  PowerConnect 
switch  line  for  small  to  midsize 
businesses  (SMB).  Competitors 
at  the  lower-end  of  the  market 
alternatively  have  upscaled  their 
offerings;  consumer-brand  com¬ 
panies  such  as  D-Link  Systems, 
Netgear  and  others  now  offer 
technologies  such  as  Layer  3 
Gigabit  Ethernet  and  SNMP  on 
their  boxes. 

Analysts  say  an  increased  use  of 
enterprise-level  applications  — 
such  as  ERP  and  CRM  systems  — 
by  small  and  midsize  companies 
is  spurring  demand  for  more 
robust  infrastructures  in  such 
firms.  Jupiter  Media  Metrix  pre¬ 
dicts  that  sales  of  enterprise  soft¬ 
ware  to  small  and  midsize  firms 
(100  to  500  employees)  will 
increase  over  the  next  three 
years,  going  from  just  less  than  $1 
billion  in  2001  to  more  than  $3.4 
billion  by  2006. 

Meanwhile,  Gartner  says  that 
SMB  spending  will  increase  7.6% 
in  2004,  as  companies  look  to 
upgrade  such  hardware  and  PCs 
and  servers,  with  upgrades  from 
100M  bit/sec  to  Gigabit  Ethernet 
on  server  and  backbone  switch 
connections. 

Netgear’s  FS526T  24+2  Smart 
Switch  is  available  for  $400,  while 
Enterasys’  Matrix  V2  costs  $400.  ■ 


Netifice 

continued  from  page  8 

company’s  120  restaurants  are  connected  to  the  corporate  VPN  via 
symmetrical  DSL  with  a  few  frame  relay  sites,  where  DSL 
wasn’t  feasible,  says  Charlotte  Krause,  vice  president  of  IS  at  Chevys. 

“We  chose  Netifice  because  they  understand  a  distributed  environ¬ 
ment  where  there  is  not  technical  support  at  the  remote  sties,” she  says. 

Once  the  company  completed  its  nationwide  DSL  VPN  upgrade  last 
year,  it  was  able  to  deploy  new  point-of-sale,  inventory  and  Web  order¬ 
ing  applications, which  have  helped  offset  some  of  the  costs  of  moving 
to  broadband  from  a  dial-up  network,  she  says. 

“These  applications  would  have  been  so  slow  on  dial-up  they  would 
have  been  ineffective,”  Krause  says.  Chevys  says  it  likes  the  idea  of  work¬ 
ing  with  a  provider  that  had  relationships  with  several  broadband  ser¬ 
vice  providers  and  specializes  in  remote  office  support,  although  other 
well-known  players  offer  similar  services.  AT&T,  MCI  and  Sprint  offer 
fully  managed  VPN  services  that  also  include  DSL,  cable  modem  or 
satellite  service.  But  these  services  typically  are  not  visible  using  a  sin¬ 
gle  management  tool,  nor  do  users  receive  a  single  invoice  as  they  do 
with  Netifice, says  David  Passmore,  research  director  at  Burton  Group. 

“Netifice  peers  with  local  service  providers  and  [cable  operators]  at 
Layer  2. The  beauty  of  this  is  that  it  allows  them  to  take  responsibility 
for  their  customer’s  network  from  end  to  end,”  Passmore  says.“Normally 
users  are  at  the  mercy  of  their  local  broadband  provider/ 

The  service  provider’s  SmartWorx  software  is  a  network  monitoring 
tool  where  users  can  get  real-time  information  on  network  perfor- 
i  nance  and  where  users  submit  trouble  tickets  and  view  their  invoices. 

Keeping  remote-office  users  connected  to  company  headquarters  is 
what  Netifice  is  hanging  its  hat  on,  but  most  of  the  service  provider’s 
ustomers  aren’t  using  this  service.  About  90%  of  Netifice’s  2,000  cus¬ 
tomers  are  dedicated  Internet  access  users  the  service  provider 
acquired  in  October  when  it  picked  up  ISP  Epoch  Internet.  Netifice 
continues  to  support  these  users  and  also  sells  dedicated  Internet 
access  services, but  the  company  is  focusing  its  sales  efforts  on  the  VPN 
market.  Netifice  has  some  big-name  customers  including  Merrill  Lynch, 
Marriott  and  Pfizer,  for  whom  it  manages  a  lO.OOOsite  VPN  ■ 


Cisco  expands  Fibre  Channel  line 
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Freedom  of  Choice  Comes  to  Wireless 

3Com's  modular  lineup  of  wireless  access  points  and  all-purpose  PC  Cards 
support  any  mix  of  WLAN  and  security  standards. 


Even  though  wireless  LANs 
have  been  available  for  years 
now,  many  enterprises  have 
shied  away  from  major 
implementations  for  a  number  of  rea¬ 
sons,  including  concerns  about  stan¬ 
dards,  security,  scalability  and  man¬ 
agement.  Nobody  wants  to  get  stuck 
with  technology  that  becomes  obso¬ 
lete  as  new  generations  emerge  or 
that  opens  the  door  to  intruders. 

3Com®  has  devised  a  wireless  LAN 
strategy  that  addresses  each  of  these 
concerns,  with  a  lineup  of  wireless 
products  that  support  all  existing 
WLAN  standards.  The  3Com  8200, 
8500  and  8700  Wireless  LAN  Access 
Points  use  a  modular  architecture  that 
allows  customers  to  upgrade  from  one 
wireless  standard  to  another  as 
requirements  dictate. 


802.11a  radio  and  the  8700  includes 
both  types  of  radios.  3Com  also  offers 
upgrade  kits  that  allow  users  to  add  any 
type  of  radio  -  802.1  la,  1 1  b  or  1 1  g  - 
to  any  of  the  modular  access  points. 
That  means  users  can  employ  any  type 
of  access  point  and  be  assured  they 
could  later  buy  an  upgrade  kit  to 
address  future  requirements. 

A  single  3Com  Wireless  PC  Card  sup¬ 
ports  all  three  IEEE  802.1 1  wireless  net¬ 
working  standards,  enabling  a  client 
machine  to  connect  to  any  type  of  WiFi 
network.  The  WiFi-certified  card  comes 
with  3Com's  award-winning,  patented 
XJACK®  antenna,  which  retracts  inside 
the  card,  so  it  won't  break  off  when 
users  store  their  computers  in  travel 
cases.  The  XJACK  antenna  also  helps 
preserve  battery  life  because  it  draws 
power  only  when  extended. 


tion  with  RADIUS  server  authentica¬ 
tion  support  using  MD5  and  the 
Extensible  Authentication  Protocol 
(EAP),  including  EAP-TLS,  PEAP  and 
EAP-TTLS. 

To  protect  data  in  transit,  3Com  sup¬ 
ports  a  number  of  encryption  algo¬ 
rithms,  including  128-bit  Advanced 
Encryption  Standard,  and  Wireless 
Equivalent  Privacy  (WEP)  RC4  40/64- 
bit,  128-bit  and  154-bit  shared-key 
encryption. 

To  ensure  good  performance,  3Com 
access  points  and  PC  Cards  include 


Naturally,  3Com  access  points  and 
PC  Cards  support  the  top  speeds 
allowed  by  each  wireless  standard  -  up 
to  54  Mbps  for  802.1 1  a  and  802.1 1  g, 
or  108  Mbps  in  turbo  mode,  which 
combines  the  throughput  of  two 
channels. 

MAKING  WIRELESS 
MANAGEABLE 

Using  the  Wireless  LAN  Manager, 
administrators  can  create  profiles 
with  the  specific  wireless  LAN  settings 
that  each  user  requires,  depending 


MODULAR 

SOLUTIONS 

With  3Com's  modular 
approach,  users  can  sup¬ 
port  any  mix  of  wireless 
standards  (see  table). 
3Com  offers  three  base 
models  of  access  points: 
the  3Com  Wireless  LAN 
Access  Point  8200 
includes  an  802.11b 
radio,  while  the  model 
8500  includes  an 
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3Com 


SECURE,  RELIABLE 
AND  FAST 

3Com  likewise  supports 
a  suite  of  security  stan¬ 
dards,  enabling  cus¬ 
tomers  to  match  the  level 
of  security  to  their  specific 
requirements.  To  protect 
against  unauthorized  net¬ 
work  access,  the  PC  Card 
and  access  points  support 
WiFi  Protected  Access 
(WPA),  the  next-genera¬ 
tion  WiFi  security  stan¬ 
dard,  802.1  x  authentica- 


3Com  wireless  LAN  access  points 
and  1  la/b/g  Wireless  PC  Card  with 
patented  XJACK  antenna  give  cus¬ 
tomers  the  ultimate  in  flexibility 
along  with  performance,  security 
and  management. 


Delaware  State  Police  Nab  a  3Com  WLAN 


"3Com  is  giving  us  the  wireless  networking  flexibility  and 
bandwidth  we  need  to  rapidly  and  securely  deliver  leading- 
edge  law  enforcement  applications  to  our  field  officers. 
Using  our  3Com  solution,  we're  extending  the  range  of  our 
networks  and  speeding  up  access  for  our  officers  so  they 
can  more  effectively  protect  and  serve  our  community. " 

Jamie  Stant,  telecommunications  consultant,  Delaware  Department 
of  Technology  and  Information. 


WLAN  Standards  at  a  Glance 


features  such  as  autonomous  load  bal¬ 
ancing,  ensuring  users  always  connect 
to  the  access  point  that  offers  fastest 
throughput,  and  dynamic  rate  shift¬ 
ing,  which  adjusts  connection  speed 
to  changing  traffic  and  environmental 
conditions. 

Like  many  other  3Com  products,  the 
access  points  support  Power  over 
Ethernet,  enabling  the  same  Category 
5  cable  that  connects  the  access  point 
to  the  network  to  supply  its  power. 
That  simplifies  installation  and  offers 
more  choices  in  mounting  options. 


H 


Standard 

Speed 

Range 

(meters) 

Frequency 

Compatible 

Standard 

I  Comments 

802.11a 

54  Mbps,  or 
108  Mbps  in 
turbo  mode 

50 

5  GHz 

1 

None 

Operates  on  a  low-interference  channel,  but  with  limited 
coverage.  Good  for  customers  with  dense  user  base. 

802.11b 

11  Mbps 

100 

2.4  GHz 

802.1 1g 

The  most  widely  deployed  wireless  standard,  802.1 1b 
has  a  high  degree  of  multivendor  interoperability  but 
operates  in  the  crowded  2.4GHz  spectrum  and  has  a 
relatively  slow  top  speed. 

802.1 1g 

54  Mbps,  or 
108  Mbps  in 
turbo  mode 

100 

2.4  GHz 

802.11b 

Higher  speed,  but  still  compatible  with  the  millions  of 
installed  802.11b  products.  Faces  same  spectrum  issues 
as  802.11b. 

on  where  they  need  to  connect  from. 
As  users  change  location,  they  mere¬ 
ly  click  on  an  icon  for  the  new  loca¬ 
tion  to  configure  the  card. 

3Com  also  supports  management 
standards  including  SNMP,  enabling 
a  3Com  wireless  network  to  be  man¬ 
aged  alongside  a  wired  network  from 
platforms  including  the  3Com 
Network  Supervisor  and  HP 
OpenView.  Using  an  embedded  Web 
server  browser,  customers  can  config¬ 
ure  parameters,  run  diagnostics  and 
monitor  performance  of  the  wireless 
LAN  from  anywhere  on  the  network. 

The  3Com  wireless  LAN  story  is  all 
about  freedom  of  choice.  Whether  it's 
choosing  the  wireless  LAN  standard 
that  best  fits  your  environment  now  - 
knowing  you  can  upgrade  if  require¬ 
ments  change  -  or  the  mix  of  authen¬ 
tication  protocols  and  encryption 
standards,  even  the  management 
platform,  3Com  offers  options  to 
match  most  any  enterprise  require¬ 
ment.  In  short,  3Com  has  eliminated 
the  roadblocks  to  widespread  enter¬ 
prise  wireless  LAN  deployments. 


Learn  More  About  3Com  Download  the  free  3Com  white  paper,  "Deploying  802.11  Wireless  LANs." 

Wireless  Network  Solutions  visit:  http://www.nwfusion.com/go/WLAN2 


1 


16 

NetworkWorld 

9/8/03 

News 

www.nwfusion.com 

Stratus  expands  fault-tolerant  server  options 


■  BY  JENNIFER  MEARS 

Stratus  Technologies  this  week  is  ex¬ 
pected  to  improve  its  line  of  fault-tolerant, 


Intel-based  servers  with  the  introduction  of 
two  boxes  designed  to  give  customers 
higher  processing  power  at  lower  prices. 
The  midrange,  one-  to  two-processor 


ftServer  5600  and  the  high-end  two-  to  four- 
processor  ftServer  6600  join  the  updated 
entry-level  ftServer  3300  that  Stratus  intro¬ 
duced  earlier  this  year. Stratus  says  it  hopes 
its  line  of  Intel-based  boxes  will  attract  cus¬ 
tomers  that  might  not  have  considered  the 
typically  more  expensive  fault-tolerant 
hardware  in  the  past. 

Fault-tolerant  servers  include  multiple 
system  components  that  operate  in  lock¬ 


step  so  that  if  one  component  fails,  the 
other  continues  working. The  components 
are  hot-swappable  and  modular  so  non¬ 
functioning  parts  can  be  removed  and 
replaced  without  interfering  with  system 
performance,  Stratus  executives  say. 

With  the  new  ftServer  5600  and  the 
ftServer  6600,  users  will  find  smaller  boxes 
that  offer  better  processing  power,  in¬ 
creased  memory  and  disk,  and  integrated 
redundant  Gigabit  Ethernet. 

The  company  says  the  boxes,  which  start 
at  $30,000  and  $60,000,  respectively,  cost 
about  half  what  their  predecessors  sold  for 
when  they  were  introduced  a  year  ago. 

The  boxes’  size  also  has  been  reduced: 
The  ftServer  5600  is  a  6U  system,  while  the 
ftServer  5240  it  replaces  could  be  config¬ 
ured  at  12U  or  HU.The  boxes  now  support 
Windows  Server  2003  Enterprise  Edition. 

In  the  past,  fault-tolerant  systems,  such  as 
Stratus’  Continuum  line  and  NonStop 
servers  from  HP  have  been  expensive  and 
big  —  geared  for  vertical  markets  such  as 
the  financial  industry.  One  of  Stratus’  com¬ 
petitors  is  Marathon  Technologies,  which 
recently  filed  for  Chapter  1 1  reorganization 
but  is  “on  the  verge  of  emerging,”  according 
to  a  spokeswoman. 

With  its  ftServer  line,  Stratus  is  looking  to 
attract  a  broader  range  of  customers  who 
might  use  the  servers  to  handle  Microsoft 
Exchange,  for  example,  or  critical  database 
applications  and  server  consolidation. 


Correction 


Iain  the  story  "WLAN  security:  A  big 
problem  for  small  nets"  (Sept.  1,  page  28) 
Rachel  Metz  should  have  been  listed  as  a 
staff  writer  at  the  Palo  Alto  Weekly. 


“The  target  is  some  portion  of  those  peo¬ 
ple  who  are  clustering  today  and,  frankly 
people  who  are  not  clustering,  but  would 
be  willing  to  spend  the  money  but  have 
found  clustering  to  be  too  complicated,” 
says  Gordon  Haff,an  analyst  at  Illuminata. 

While  clusters  could  require  complicated 
configurations,  multiple  operating  systems 
and  applications  that  are  designed  to  run 
in  a  distributed  fashion,  the  ftServers  run 
one  Windows  operating  system  and 
applications  without  modification, 
says  Denny  Lane,  director  of  prod¬ 
uct  marketing  for  Stratus. 

“With  our  technology  you’re  run¬ 
ning  one  version  of  the  operating 
system, so  there  is  an  inherent  cost- 
savings,  but  you  also  don’t  have  to 
teach  the  application  anything.  It’s 
simple^’  he  says.“Feople  are  pulling 
their  hair  out  with  clustering." 

Ron  Ham,  manager  of  Process  IS 
Rayonier,  Performance  Fibers 
Group,  says  he  has  had  his  eye  on 
Stratus  machines  for  years,  but  they 
were  always  too  expensive  and  too 
large  for  what  he  needed.The  Jacksonville, 
Fla.,  company  is  a  supplier  of  specialty 
fibers,  timber  and  wood  products.  When 
Stratus  introduced  the  ftServer  3300  in 
March,  he  jumped  on  it. 

“Typically, Stratus  was  a  half-million-dollar 
or  $250,000  solution  that  we  very  desper¬ 
ately  wanted  to  get  to,  but  it  didn’t  fit  our 
model,”  he  says.“When  they  came  out  with 
the  3300  [which  starts  at  $23,000]  it  was 
more  attractively  priced  and  engineered  to 
compete  with  the  cluster  technology  of 
Microsoft.” 

Ham  says  the  success  he’s  had  with  the 
ftServer  3300  is  pushing  him  to  consider 
bringing  in  more  ftServer  boxes,  which  he 
might  use  to  replace  Microsoft  clusters. 

“The  success  of  thq  smaller  system  is 
going  to  make  us  want  to  take  a  look  at 
the  larger  systems,”  he  says. 

“We  will  want  to  consider  the  larger 
machines  in  comparison  with  the  [stor¬ 
age-area  network]  and  other  things  we  are 
developing,"  he  adds.  ■ 
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I  THIS  WEEK'S  QUESTION: 

What  was  wireless  service 
provider  Nextel’s  original 
name? 

Answer  tbs  and  nine  additional  questions  onfcne  and 
you  could  win  $500!  Visit  Ketwwrt  World  hniaa  and 
enter  2349  in  the  Search  box. 

www.nwfusion.com 


Cisco  Systems 


Cisco  Press 


Do  you  have  the  CCNA  640-801 

SELF-STUDY  MATERIALS  YOU  NEED 
TO  SUCCEED? 

Cisco  Press,  the  best-selling  publisher  of  Cisco  certification  self-study 
books,  brings  you  an  all-new  lineup  of  exam  guides  for  the  latest 
CCNA*  exams,  CCNA  640-801,  ICND  640-811,  and  INTRO  640-821. 
Prepare  for  your  CCNA  exam  with  these  best-of-breed  self-study 
books — the  only  ones  authorized  by  Cisco  Systems®. 


Th*  offid*)  hH  hu9|  IM1  pnpaimlon  o> 
lor  CHco  CCHA  MO401.  ICNO  WO-81 
and  INTRO  MO  831  rarra 


CCNA  Certification  Library 

ISBN:  1-58720-095-3 

—  A  value-priced  two-book  bundle  of  CCNA 
INTRO  Exam  Certification  Guide  and 
CCNA  ICND  Exam  Certification  Guide 
plus  bonus  $10  CCNA  exam  voucher 

CCNA  INTRO  Exam  Certification  Guide 

ISBN:  1-58720-094-5 

CCNA  ICND  Exam  Certification  Guide 

ISBN:  1-58720-083-X 

CCNA  Flash  Cards  and  Exam 
Practice  Pack 

ISBN:  1-58720-079-1 


Get  what  you  need  to  succeed  at  Borders 

AND  ENTER  TO  WIN 

Visit  Borders  today  to  purchase  these  new  CCNA  releases.  You  can 
also  pick  up  a  free  IP  Telephony  "At-A-Glance"  reference  chart.  Hurry! 
This  special  in-store  offer  is  available  only  while  supplies  last.* 

While  at  Borders,  register  to  win  a  Dell  AXIM™  handheld  with 
KnowledgeNet  CCNA  courseware  or  a  Borders  Books  &  Music 
gift  card. 

Visit  www.ciscopress.com/borders  for  details. 

Top  3  reasons  Cisco  chose  KnowledgeNet  to  train 
MORE  THAN  700,000  EMPLOYEES  AND  PARTNERS! 

•  Quality  blended  live  and  self-paced  training  solutions 

•  Advanced  technology  for  immediate  courseware  updates 

•  World-class  team  of  certified  Cisco  Systems  instructors 

Visit  www.knowledgenet.com/ciscopress  for  details. 


BORDERS 

BOOKS  MUSIC  MOVIES  CAFE 


k 


KnowledgeNet 

the  best  of  a  new  breed* 


*No  purchase  necessary. 


Stratus'  midrange  Intel-based  server,  the  ftServer 
5600,  is  designed  to  provide  flexibility  and  scalability 
for  handling  1/0-  intensive  applications  and  database 
applications. 
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■  LAN/WAN  SWITCHES  AND  ROUTERS 

■  ACCESS  DEVICES  ■  SERVERS  ■  VPNS 

■  OPERATING  SYSTEMS  ■  NETWORKED  STORAGE 

■  VOIP  ■  WIRELESS  NETWORKS 


■  Virginia  Polytechnic  Institute 
and  State  University  will  build  an 
InfiniBand  cluster  using  Apple's  new 
dual-processor  Power  Mac  com¬ 
puter  with  the  64-bit  G5  pro¬ 
cessor.  When  it  is  completed,  the 
cluster  of  1,100  nodes  is  expected  to 
rank  among  the  most  powerful  in  the 
world,  Virginia  Tech  said.  The  Apple 
cluster  will  reside  within  Virginia 
Tech's  Computing  Center  and  the 
university's  Institute  for  Critical 
Technology  and  Applied  Science  will 
use  it,  Virginia  Tech  said.  Mellanox 
Technologies  supplied  the  I/O  fab¬ 
ric,  drivers,  cards  and  switches  for 
the  cluster,  Cisco  provided  the 
Gigabit  Ethernet  switches,  and 
Liebert,  a  division  of  Emerson 
Electric,  supplied  the  cooling  system. 
Shipments  of  dual-processor  Power 
Macs  to  regular  customers  were  sup¬ 
posed  to  start  in  August,  but  many 
users  have  reported  on  Apple  enthu¬ 
siast  sites  that  their  shipments  have 
been  delayed.  Apple  says  the  new 
Power  Macs  currently  are  shipping, 
and  the  company  is  increasing  ship¬ 
ments  of  the  dual-processor  model  to 
production  volumes  over  the  next 
two  weeks. 

■  Spectel  is  targeting  road  warriors 
with  its  new  MobileConnexion 

offering.  Announced  last  week, 
MobileConnexion  integrates  with 
Spectel’s  voice  and  Web  conferenc¬ 
ing  bridge  and  lets  users  with  wire¬ 
less  devices  and  cellular  phones  par¬ 
ticipate  in  and  control  a  conference 
remotely.  The  product  uses  Short 
Message  Service  and  instant-mes¬ 
saging  technology  to  invite  partici¬ 
pants  into  a  conference  and  offers 
an  auto-reconnect  system  for 
dropped  cellular  callers.  Wireless 
handheld  users  have  an  interface  for 
adding,  dropping  and  muting  confer¬ 
ence  participants.  Spectel  is  target¬ 
ing  MobileConnexion  at  service 
providers  and  large  corporations. 
Average  price  range  for  a  mobile  net¬ 
work  operator  implementation  is 
about  $750,000  to  $1  million.  Pricing 
is  dependent  on  how  and  where  the 
product  is  installed. 


Site:  Lessons  from  leading  users 

Bear  Steams  is  bullish  on  VoIP 


Monitoring  the  situation 


Bear  Stearns  uses  more  than  150  Network  Associates  Sniffer  distributed 
appliances  to  monitor  its  VoIP  implementation. 


Sniffer  appliances  collect  information  about  call  volume,  bandwidth  usage  and  traffic 
patterns,  sending  it  via  a  second  internal  LAN.  This  second  LAN  was  installed  strictly 
for  monitoring  purposes  and  runs  parallel  to  the  primary  Gigabit  Ethernet  LAN. 


Madison  Avenue  in  Manhattan 


Snifter  protocol- 
analysis  appliance 


Whippany,  N.J.,  network 
operations  center 


Private  multi-megahit 
fiber  line 


Network  Associates  Performance  Orchestrator  gathers  data  and 
presents  it  in  real  time  to  operators  who  watch  for  network  performance 
problems  or  other  issues  that  would  affect  trader  operations. 


■  BY  ELLEN  MESSMER 

At  the  New  York  City  head¬ 
quarters  of  investment  firm 
Bear  Stearns  &  Co.,  the  mur¬ 
mur  of  hundreds  of  traders  in 
stocks  and  bonds  can  be  heard, 
hunkered  down  behind  their 
space-age,  flat-screen  computers 
and  telecom  consoles  called 
turrets. 

Long  used  in  the  financial  in¬ 
dustry  these  turrets  from  IPC  Infor¬ 
mation  Systems  are  the  cockpit  for 
the  data,  video  and  voice  commu¬ 
nications  that  Bear  Stearns  traders 
depend  on  for  decision-making  in 
the  high-stakes  world  of  buying 
and  selling  in  global  markets. 

In  the  past,  voice  lines  to  the  tur¬ 
rets  were  linked  through  a  PBX. 

But  for  a  year  now,  Bear  Stearns 
has  entrusted  trader  activity  to 
voice  over  IP  (VoIP).  With  VoIP  comes  a 
number  of  critical  issues  but  none  more 
so  than  being  able  to  monitor  and  con¬ 
trol  the  network  effectively 
For  this  critical  activity  Bear  Stearns 
plugged  more  than  150  Network  Asso¬ 
ciates  Sniffer  distributed  appliances  for 
protocol  analysis  throughout 
its  sprawling  high-rise  Gigabit 
LAN.lt  is  the  largest  installation 
of  Sniffer  equipment  any¬ 
where,  according  to  Network 
Associates. 

Each  Sniffer  appliance  col¬ 
lects  the  relevant  information 
about  call  volume,  bandwidth 
usage  and  traffic  patterns, 
sending  it  via  a  second  inter¬ 
nal  LAN. This  second  LAN  was 
installed  strictly  for  monitor¬ 
ing  purposes,  running  parallel 
to  the  primary  Gigabit  Ether¬ 
net  LAN. 

From  this  secondary  out-of-band  net¬ 
work,  the  Sniffer  monitoring  data  is  sent 
directly  over  multi-megabit-speed  wide- 
area  private  line  to  Bear  Stearns’  24-hour 
network  operations  center  (NOC)  in 
Whippany,  N.J. 

The  line  is  part  of  a  larger  gigabit-speed 
metropolitan-area  network  (MAN)  that 


Bear  Stearns  operates  in  the  New  York 
City  area  on  dark  fiber  obtained  from 
Metromedia  Fiber  Network  and  Nortel 
Optera  switches.  This  MAN  acts  as  a  pri¬ 
vate  information  superhighway  be¬ 
tween  Bear  Stearns’  Manhattan  head¬ 
quarters,  the  investment  firm’s  Brooklyn 


data-processing  facilities  and  the 
Whippany  NOC. 

The  NOC  is  situated  in  six  buildings  on 
a  65-acre  site.  In  one  of  the  buildings,  the 
management  data  is  stored  and  viewed 
in  real  time  or  for  historical  purposes  at 
the  Network  Associates  management 
console,  the  Network  Performance  Or¬ 


chestrator.  The  purpose  is  to  recognize 
network  slowdowns  or  other  problems 
that  would  affect  trader  operations. 

“We  do  this  to  define  any  critical  de¬ 
pendencies  and  be  proactive  in  our 
monitoring,”  says  Anthony  Cellante, 
director  of  the  IT  group  at  Bear  Stearns. 
He  says  the  Sniffer  technology 
has  been  a  good  approach  to 
troubleshooting  IP  networks 
and  now  is  starting  to  be  used 
to  analyze  application  perfor¬ 
mance  as  well. 

Cellante  says  the  next  step 
will  be  to  take “hoot-and-holler” 
intercom  system  that  is  support¬ 
ed  by  the  IPC  turrets  and  con¬ 
vert  that  to  IP 

Used  mostly  in  the  broker¬ 
age  industry  and  by  utilities, 
hoot:and-holler  is  an  audio¬ 
conference  network  known 
since  the  1960s  to  provide 
dedicated,  always-on  connections 
used  for  two-way  business-to-business 
voice  communications. 

Typically  used  to  advise  brokers  on 
market  movement  or  bark  out  trading 
orders,  it’s  a  critical  element  in  larger 
brokerages  because  its  functions,  such 
See  Bear  Stearns,  page  19 


The  Sniffer  technology  has  been  a 
good  approach  to  troubleshooting 
IP  networks  and  now  is  starting  to 
be  used  to  analyze  application 
performance  as  well,  says 
Anthony  Cellante,  director  of  IT  at 
Bear  Stearns. 
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Dell  |  Enterprise 

Last  year,  Dell  sold  more  Linux  servers  in  the  U.S.  than  any  other  server  vendor!  And  here's 

one  reason  why.  In  a  recent  Dell  test,  a  Dell/Oracle®  9//Linux  solution  running  an  Intel®  XeorT 
processor-based  Dell  PowerEdge"  6650  4P  server  was  89%  faster  and  27%  less  expensive  than  a 
Sun  Fire  V480  4P  server  running  an  Oracle  9//Sun  Solaris  solution.2  To  see  complete  test  results,  go 
to  www.dell.com/migration16. 


There's  little,  if  any,  debate:  Migrating  from  UNIX  to  a  standards-based  solution  lowers  cost  and 
increases  flexibility.  Dell  gives  you  both  mind-bending  performance  and  unparalleled  expertise,  all 
at  a  great  value.  And  the  entire  solution  is  backed  by  enterprise  level  24/7  service  and  support. 


The  migration  is  on.  Find  out  how  you  can  make  the  most  of  it  for  your  organization.  Call 
1-866-871-9882  or  go  to  the  Dell  UNIX  Migration  online  calculator 
at  www.dell.com/migration16  to  see  how  a  Dell  solution  can  lower 
your  migration  costs  and  help  simplify  the  transition. 


Leading  enterprise  solutions.  Easy  as 
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Click  www.dell.com/migration16  Call  1-866-871-9882 

loll  Iree 

.'PC.-  Tests  by  Dell  .r  January  2003  un  baseball  database  Dell  configuration  Dell  PowerEdge  6650  server  with  four  2  0  GHj  Xeon  UP  processors.  Red  Hat  Linux  Advanced  Server  21.3  Year  Gold  Support  Price  (32.419  (www  dell  com.  7/1/03)  Sun  configuration 
a SPARC  HI  processors,  Solans  9  lUTO  version)  3  Year  Gold  Support  Price  $44,646  (www  sun  com.  7/1/031  For  details  and  results,  see  www  dell  com/rragrahon 
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An  invitation  dropped  into  my  in-box 
the  other  day  —  1  was  invited  to  apply 
for  a  press  pass  for  PC  Expo,  coming 
up  next  week  at  New  Yorks  Javits  Center.  It 
doesn’t  seem  that  long  ago  that  I  would 
have  had  to  struggle  to  prove  to  the  people 
running  the  show  that  1  deserved  press  cre¬ 
dentials.  Now  they  were  begging  me  to 
come.  As  an  enticement,  the  note  men¬ 
tioned  that  not  only  would  this  event  in¬ 
clude  PC  Expo,  but  also  “Networks  For 
Business  New  York”  and  “OutSource  World”! 

It  suddenly  occurred  to  me  that  it’s  been 
almost  three  years  since  my  last  “big  show” 
trade  event  (NetWorld+lnterop  Atlanta  in 
fall  2000)  .Three  years  without  a  Comdex  or 
a  PC  Expo  or  a  NetWorld  or  an  Interop. 
Have  I  become  a  hermit? 

No,  1  still  go  to  as  many  trade  events  each 
year  as  I  ever  did  —  in  fact,  I  might  go  to 
more  now.  But  they  are  smaller,  more 
focused  events.  Gatherings  such  as 


Big  trade  shows  have  lost  luster 


Microsoft’s  TechED,  Novell’s  BrainShare, 
NetPro’s  Directory  Experts  Conference 
and  the  Burton  Group's  Catalyst.  By  trade 
show  standards,  the  last  two  could  be  con¬ 
sidered  “intimate  little  gatherings”:  They 
use  only  one  hotel  and  all  sessions  are  in 
that  hotel  building.  No  need  to  queue  for 
shuttle  buses  or  taxis,  no  sitting  in  traffic 
for  hours  to  go  three  miles.  You  can  go 
back  to  your  hotel  room  if  you  need  some 
peace  and  quiet  (or  you  have  a  deadline 
looming). 

It  did  always  rankle  a  bit  that  I’d  spend  a 
week  in  some  large,  noisy  anonymous  city 
(Vegas,  New  York,  Chicago,  Dallas,  Atlanta, 
Boston)  spending  more  than  a  monthly 
mortgage  payment  on  a  not-quite-clean 
hotel  room,  eating  anonymous  meat-on-a- 
stick  in  an  endless  round  of  hospitality 
suites  (which  offered  little  hospitality). 

At  least  15  years  ago,  if  you  visited  a  ven¬ 
dor’s  booth  you  got  a  T-shirt.  An  ugly 
T-shirt,  true,  but  they  were  great  souvenirs 
for  the  folks  you  left  at  home  fighting  the 
network  while  you  “enjoyed”  your  “vaca¬ 
tion”  in  the  big  city!  Ten  years  ago,  the  ven¬ 
dors  started  making  you  sit  through  a  pre¬ 
sentation  before  giving  you  the  shirt.  Five 
years  ago,  you  had  to  sit  through  the  pre¬ 


sentation,  fill  out  the  contact  card  and 
then  one  of  the  20  to  30  folks  in  the  crowd 
would  get  a  T-shirt.  It  just  wasn’t  worth  it 
any  more. 

Check  out  the  smaller  shows.You’ll  learn 
more,  spend  less  and  enjoy  a  trade  show 
once  again. 

Kearns,  a  former  network  administrator, 
is  a  freelance  writer  and  consultant  in 
Silicon  Valley.  He  can  be  reached  at 
wired@  oquill.com. 


Tip  of  the  Week 


We  missed  a  big  birthday 
earlier  this  year,  the 
I  40th  anniversary  of  the 
ASCII  code.  Browse  over  to 
Mp  www.nwfusion.com,  Doc- 

■  Finder:  7526  (which  isn’t  very 
i  organized,  but  has  the 

important  information),  and 
read  the  fascinating  story 
of  ASCII. 


Visit  www.dell.com/migration16  and 
go  to  the  Dell  UNIX  Migration  online 
calculator  for  a  free  migration 
assessment.  Dell  offers  a  host  of 
end-to-end  migration  services, 
including  those  for  Oracle®  9/.  Call 


Lessons  from  leading  users 


Bear  Stearns 

continued  from  page  17 


as  a  speed-dial-like  feature  known  as 
“automated  ring-down,”  allow  for  imme¬ 
diate  communication  of  information  to 
select  brokers  so  they  can  act  upon  it 
in  seconds. 

Until  recently,  hoot-and-holler  systems 
have  been  entirely  circuit-switched, 
which  has  meant  brokerages  often  had 
to  budget  money  for  their  hoot-and- 
holler  networks  for  long-distance  pur¬ 
poses.  But  using  hoot-and-holler  over  the 
Internet  or  a  private  IP  network  could 
result  in  savings. 

“We’re  looking  at  supporting  hoot-and 
holler  requirement  on  IP  and  leveraging 
the  capacity  on  our  intranet,”  Cellante 
says. 

The  early  success  with  VoIP  has  led  to 
Bear  Stearns  considering  whether  to  add 
VoIP  in  other  offices  around  the  world  for 
thousands  of  other  traders. 

If  VoIP  can  be  expanded  to  other  Bear 
Stearns  offices  and  to  clients,  the  cost- 
savings  could  be  substantial,  cutting 
long-distance  costs  for  voice  calling  and 
the  specialized  hoot-and-holler  inter¬ 
com  systems. 

Meanwhile,  the  shift  to  VoIP  began 
when  Bear  Stearns  moved  into  its  new 
Madison  Avenue  building  last  year,  in¬ 
stalling  a  Gigabit  Ethernet  LAN  based  on 
Cisco  Catalyst  switches  to  be  able  to  han- 


Bear  Stearns  traders  use  VoIP-enabled  turrets  (above)  that  promise  to  reduce  mainte¬ 
nance  costs  and  improve  productivity,  the  company  says. 


die  VoIP  traffic  loads.  The  firm  swapped 
out  its  older  circuit-switched  1PC  Trade- 
Net  MX  model  turrets  for  the  IPC  VoIP  tur¬ 
rets  for  the  traders. 

“It  was  a  fantastic  opportunity,  starting 
from  the  ground  up,”  Cellante  says.  He 
declines  to  discuss  the  cost  of  the  project, 
but  he  says  Bear  Stearns  wants  to  make 
broader  use  of  VoIP  because  in  the  long 
term  it  could  lead  to  cost-savings  through 
not  having  to  buy  circuit-switched  tele¬ 
com  lines  and  services. 

With  the  new  VoIP  turrets,  Bear  Stearns 
took  the  first  step  to  phase  out  dual  main¬ 
tenance  of  its  data  and  voice  networks, 


reducing  maintenance  costs. 

And  the  VoIP  turrets  brought  one  bene 
fit  that  traders  wanted  —  letting  them 
sign  onto  any  terminal  in  any  office, 
something  that  was  not  possible  with  the 
old  PBX-based  turrets.  This  “Phase  I”  of 
VoIP  use  was  completed  last  year.  ■ 

More  online! 

Trying  to  re-architect 
your  data  center? 

Attend  our  seminar  to 
learn  some  strategies. 

DocFinder:  7131 


1-866-871-9882  today  to  speak  with 
a  Dell  representative.  Together,  you 
can  assess  your  individual  needs  and 
then  develop  a  cost-effective  plan  for 
UNIX  migration. 


Easy  as 
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Call  1-866-871-9882 

toll  free 

Click  www.dell.com/migration16 
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Advertisement 


To  succeed  today,  your  enterprise  lias  to  undergo  a 
rapid  transformation  from  a  series  of  functionally  driven 
silos  connected  by  a  common  mailroom  to  a  whole  whose 
sum  is  greater,  and  more  profitable,  than  its  parts. 

It's  called  integration.  And  it’s  more  than  just  the 
latest  trend;  it’s  the  key  to  survival  in  an  increasingly 
unpredictable  economic  climate. 

The  payoff:  increased  revenue,  less  cost,  greater  efficiency, 
and  more-satisfied  customers. 

CRM,  SAY  HELLO  TO  SCM. 

The  idea  of  integrating  SCM  and  CRM  is,  quite  simply, 
a  “no-brainer.”  It  quickly  results  in  maximum  value  across 
your  entire  supply-demand  chain.  In  fact,  only  when  the 
two  solutions  are  integrated  is  either  being  used  to  its  fullest 
money-making  potential. 

With  integration,  your  back  office  can  quickly  deliver 
on  front-end  promises,  satisfying  even  your  most  difficult- 
to-please  customers. 

You’ll  gain  the  ability  to  accurately  prioritize. 
Valuable  resources  will  no  longer  be  spent  on  unprofitable 
customers  or  products. 

Timely  customer  information  flowing  across  your 
supply  chain  will  enable  you  to  optimize  product  and 
service  development. 

You’ll  be  able  to  more  accurately  forecast  demand, 
reducing  costly  stock-outs  and  overstocks. 

Your  sales  reps,  armed  with  inventory  data,  delivery 
schedules,  and  product  insight,  will  become  considerably 
more  productive. 

And  that’s  just  the  tip  of  a  very  profitable  iceberg. 

Of  course,  the  concept  of  integration  is  one  thing. 
Accomplishing  it  is  quite  another. 


TECHNOLOGY  HAS  FINALLY  CAUGHT  UP  TO  VISION. 

For  over  a  decade,  integration  has  been  the  Holy  Grail. 
Unfortunately,  companies  had  to  spend  prohibitive 
amounts  of  money  and  time  building  custom  interfaces 
that  might  make  SCM  and  CRM  work  together. 

But  now  there’s  a  new  technology  platform  that  lets 
you  get  it  done  more  easily  than  ever  before. 

It’s  called  SAP  Net  Weaver? 

SAP  NetWeaver  is  a  comprehensive,  open  technology 
platform  that  seamlessly  connects  your  people,  information, 
and  business  processes.  This  unique  “process  approach” 
allows  all  your  departments  to  share  information  in  real 
time.  Delays,  miscommunication  and  waste  are  minimized. 
Profitability  is  increased  —  often  dramatically. 

And  since  you  can  quickly  snap  a  large  variety  of 
your  current  applications,  both  SAP  and  non-SAP,  onto 
SAP  NetWeaver,  time  to  ROI  is  significantly  reduced. 

READ  THE  EYE-OPENING  STORY. 

GET  YOUR  FREE  WHITE  PAPER. 

In  short,  integrating  SCM  and  CRM  allows  you 
to  precisely  identify  the  demand  trends  of  your  most 
profitable  customers  and  respond  with  the  product  that 
best  meets  their  needs  using  the  most  efficient  mix  of 
materials,  services  and  suppliers. 

Get  all  the  details  —  the  benefits,  the  insights,  the 
results  —  in  a  special  new  white  paper,  “Supply  Chain 
and  Demand  Chain  Integration:  The  Pathway  to  Profit  and 
Competitive  Advantage’.’ 

It’s  an  in-depth  exploration  of  how  integration  can  pro¬ 
vide  your  business  with  a  competitive  advantage  in  product 
leadership,  operational  efficiency,  and  customer  intimacy. 
Get  your  free  copy  at  sap.com/integration 


THE  BEST-RUN  BUSINESSES  RUN  SAP 


GET  YOUR  FREE  WHITE  PAPER  ON  SUPPLY  CHAIN  AND  DEMAND 
CHAIN  INTEGRATION.  GO  TO  SAP.COM/INTEGRATION 


nexhra 


It  ain’t  braggin’ 
if  you  can  do  it. 


Finally,  a  company  that  talks  big  and 
works  bigger.  A  company  that  talks  ROI 
and  actually  delivers.  A  company  that 
provides  real  business  value  you  can 
measure.  A  network  solutions  and 
services  provider  called  NextiraOne. 


At  NextiraOne,  we  bring  clarity  to  your 
complex  communications  networks. 
Planning,  designing,  implementing, 
supporting  and  managing.  For  voice, 
data  and  converged  infrastructures. 

In  the  United  States  or  around  the 
world.  You  name  it,  we  do  it  -  with 
world-class  results. 


www.NextiraOne.com  (888)  888-1055 
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■  PORTALS  ■  MESSAGING/GROUPWARE 

■  E-COMMERCE  ■  SECURITY 

■  MIDDLEWARE  ■  DIRECTORIES 

■  NETWORK  AND  SYSTEMS  MANAGEMENT 

■  WEB  SERVICES 


■  Iron  Mountain  recently  announced 
a  service  that  lets  businesses  rapidly 
restore  electronic  data.  The  company’s 
Data  Restoration  and  Electronic 
Discovery  Support  service  lets 
organizations  gather,  restore,  search 
for,  organize  and  deliver  e-mail  records 
required  for  litigation  purposes.  Iron 
Mountain  recovers  e-mail  and  elec¬ 
tronic  records  from  back-up  tapes  and 
other  media.  It  then  captures  and 
indexes  the  records  and  loads  them 
into  the  outsourced  Digital  Archive, 
where  records  can  be  organized  for 
retrieval.  A  Web-based  user  interface 
is  available  for  users  to  search,  re¬ 
trieve,  view  and  organize  assets.  The 
service  is  priced  on  the  number  of 
tapes  retrieved  and  starts  at  $200  per 
tape  depending  on  how  fast  the  data 
needs  to  be  retrieved. 

■  Sanctum  last  week  announced 
AppScan  4.0,  the  latest  version  of  its 
security-testing  tool  for  analyzing  Web 
and  proprietary  applications  for  possi¬ 
ble  security  holes.  AppScan  4.0,  which 
adds  support  for  testing  for  XML  and 
Simple  Object  Access  Protocol  vul¬ 
nerabilities,  costs  $15,000  and  runs  on 
Windows  2000  and  XP  servers. 

■  IBM  has  rolled  out  three  portal- 
based  software  packages  aimed 
at  creating  online  environments  to 
streamline  business  and  improve  col¬ 
laboration  for  specific  vertical  indus¬ 
tries.  IBM  executives  say  they 
worked  with  business  leaders  to 
design  the  software  packages  that 
are  geared  for  the  automotive,  gov¬ 
ernment  and  life  sciences  markets. 
The  software  uses  IBM's  WebSphere 
Portal  and  Lotus  software  as  the 
foundation  for  applications  that  are 
integrated  to  create  industry-specific 
collaboration  environments.  The  plat¬ 
forms,  which  IBM  announced  last 
week  can  work  with  multiple  operat¬ 
ing  environments,  including  Linux  and 
Windows,  IBM  says.  Pricing  for  the 
packages  vary  because  customers 
select  the  building  blocks  such  as 
WebSphere  Portal,  which  starts  at 
$87,000,  and  WebSphere  Commerce, 
which  starts  at  $80,000. 


Server  management  tools  grow  up 


Server  status 

A  sampling  of  server  management  sofware  and  the  systems  and 
applications  running  on  them. 


Company 

Product 

Features 

BMC  Software 

Patrol 

Versions  forWindows,  Linux,  Unix, 
Dell  OpenManage,  AS/400  and 
OpenVMS. 

Computer  Associates 

Unicenter  Network  and 
Systems  Management 

Enables  server  reconfiguration;  new 
Sonar  protocol  analysis  technology 
included. 

Compuware 

Vantage  for  Server 
Management 

Manages  Unix,  Linux  andWindows 
operating  systems  from  one 
console. 

Heroix 

eQ  management  Suite 

Unifies  monitoring  across  Unix, 

Linux,  Windows  Server  and 
OpenVMS  platforms. 

HP 

OpenView  Operations 

Collects  traps  from  hardware; 
manages  all  major  Unix,  Linux  and 
Windows  server  operating  systems. 

IBMTivoli 

Tivoli  Monitoring 

Tracks  systems  resources;  detects 
bottlenecks;  works  across  Windows, 
Linux,  Unix  and  zOS  platforms. 

Software  distribution 
tool  on  tap  from  Tally 


■  BY  JENNIFER  MEARS  AND  DENISE  DUBIE 

As  corporations  move  toward  utility  com¬ 
puting,  where  system  resources  grow  and 
shrink  according  to  business  demands, 
server  management  tools  are  evolving  to 
do  more  than  simply  monitor  and  manage 
isolated  network  nodes.  Analysts  say  users 
can  expect  these  management  packages 
to  become  increasingly  automated,  better 
handle  security  and  patch  management, 
and  become  usable  across  a  variety  of  dif¬ 
ferent  server  platforms. 

Analysts  say  they  expect  traditional  serv¬ 
er  management  packages  to  become  inte¬ 
grated  more  tightly  with  storage  provision¬ 
ing  tools  and  to  develop  more  application 
savvy  so  users  can  configure  servers  to 
meet  specific  application  demands. 

“As  the  move  toward  automation  goes 
up  and  the  number  of  servers  under  man¬ 
agement  goes  up,  the  management  tools 
have  to  get  more  mature,”  says  Jonathan 
Eunice,  principal  analyst  at  Illuminata. 
“Putting  more  elbow  grease  into  manag¬ 
ing  servers  just  seems  less  and  less  pro¬ 
ductive  and  less  acceptable.” 

In  the  past,  server  management  tools, 
such  as  IBM  Director,  Compaq/HP’s 
Insight  Manager,  Sun  Management  Center 
and  Dell’s  OpenManage,  have  been  the 
less-than-flashy  workhorse  tools  of  data 
center  management.  But  in  the  past  few 
years,  these  types  of  packages  have  taken 
on  more  sophisticated  features  such  as 
partitioning  capabilities  in  one  manage¬ 
ment  console. 

“It  used  to  be  people  treated  server 
managers  to  twiddle  bits  on  individual 
systems,”  Eunice  says.“Now  they’re  doing  a 
lot  more  to  treat  the  computer  as  a  busi¬ 
ness  asset.” 

That  means  users  can  expect  some 
server  management  tools  —  base  ver¬ 
sions  of  which  typically  are  shipped 
with  the  hardware  —  to  take  on  features 
more  in  line  with  high-level  network 
management  packages  such  as  HP’s 
OpenView,  IBM’s  Tivoli  and  Computer 
Associates’  Unicenter.  These  packages 
can  acknowledge  network  components, 
but  are  more  concerned  with  overall 
network  performance. 

And  those  packages  that  don’t  take  on 
more  advanced  features  will  make  the 
nitty-gritty  work  they  do  —  such  as  asset 
management  or  patch  management  — 
happen  more  smoothly  as  they  feed  into 
the  higher-level  tools  that  are  used  to 
See  Servers,  page  24 


■  BY  JOHN  FONTANA 

Tally  Systems,  which  offers  corporate 
executives  tools  for  asset  management, 
now  is  adding  software  for  helping  cus¬ 
tomers  deploy  software  and  remotely  man¬ 
age  desktops. 

The  company  last  week  announced  its 
Cenergy  client  management  suite.  The 
suite  features  TS.Deploy  which  automates 
software  distribution  to  desktop  PCs  and 
mobile  devices.  The  suite  also  includes 
TS.Remote  for  remote  desktop  manage¬ 
ment  and  Cenergy  Discovery  Module  for 
collecting  an  inventory  of  desktop  soft¬ 
ware  and  the  hardware  on  which  it  runs. 

“It  is  getting  harder  for  asset  management 
tools  to  be  stand-alone  products,”  says 
David  Friedlander.an  analyst  with  Forrester 
Research.  “It  is  difficult  to  compete  with 
companies  that  offer  additional  functional¬ 
ity.  We  are  seeing  more  product  suites  that 
combine  asset  and  inventory  management 
and  deployment  capabilities." 

Cenergy  will  compete  with  similar  tools 


from  Altiris,LanDesk  and  Novadigm. 

Integrated  packages  are  being  built  be¬ 
cause  corporate  executives  want  one  tool 
that  lets  them  see  what  is  installed  on  a 
client  machine  or  device,  and  distribute 
software  to  or  troubleshoot  that  client. 

The  foundation  of  TS.Deploy  is  its 
Command  Server,  which  runs  on  any  Open 
Database  Connectivity-compliant  data¬ 
base.  With  the  Command  Server  console, 
which  runs  on  Windows  2000,  users  can 
group  target  systems  by  several  variables, 
including  Size  of  hard  drive,  amount  of 
RAM  and  installed  software.  Users  also  can 
administer  directory  information  to  group 
users  who  need  the  same  software  distrib¬ 
utions.  TS.Deploy  also  lets  administrators 
create  “packages”  of  software  for  distribu¬ 
tion  including  hot  fixes,  virus  updates  and 
configuration  changes.  The  software 
includes  restart  controls  if  a  transmission  is 
interrupted,  bandwidth  throttling,  status 
logging,  task  scheduling  and  self-healing 
applications  capabilities. 

See  Tally,  page  24 
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It’s  been  quite  a  few  weeks  recently  on 
the  spam  front,  and  it  looks  like  the 
good  guys  are  losing  big  time. 

A  few  hundred  thousand  new  spam  relay 
hosts  might  have  been  established  around 
the  world,  the  Federal  Trade  Commission 
(FTC)  seems  to  be  giving  up  fighting  spam 
at  least  according  to  the  press,  and  a  pri¬ 
mary  source  of  anti-spam  information  is 
under  heavy  attack. 

For  a  while  things  weren’t  looking  too 
bad.  Congress  finally  seemed  to  get  the 
message  that  folks  in  the  real  world  were 
fed  up  and  wanted  legislators  to  do  some¬ 
thing.  Congress  even  seemed  to  have  got¬ 
ten  that  message  loud  enough  that  it  was 


starting  to  be  heard  above  the  roar  of  dona¬ 
tions  from  those  who  want  to  keep  filling 
your  mailbox. 

Even  the  Direct  Marketing  Association  — 
the  folks  suing  the  U.S.  government  to  stop 
the  national  anti-telemarketing  do-not-call 
list  (even  though  41  million  registrations 
on  that  list  should  be  a  hint  to  the  DMA  that 
it's  on  the  wrong  side)  —  has  offered  to 
work  with  the  FBI  to  “identify  and  prose¬ 
cute  spammers.” 

But  then  the  chair  of  the  FTC  reportedly 
went  into  wet-blanket  mode  and  pooh- 
poohed  all  of  the  current  congressional 
proposals.  Although  the  actual  speech  (see 
www.nwfusion.com,  DocFinder:  7525)  is 
far  better  than  the  reports  would  have  indi¬ 
cated  (even  if  he  seems  to  like  “the  flow  of 
useful  information  to  consumers”  more 
than  Ido  —  by  a  few  orders  of  magnitude). 

But  now  all  hell  has  broken  loose.The  lat¬ 
est  generation  in  the  evolution  of  the  SoBig 
virus  (or  worm,  depending  on  your  defini¬ 


tion)  struck  on  Aug.  19. 1  didn’t  get  my  first 
SoBig  message  until  early  that  morning, but 
in  the  following  week  and  a  half  I’ve 
received  7,917  to  my  own  mailbox. 

I  cannot  begin  to  imagine  how  many 
went  to  the  central  mail  servers  at  the  uni¬ 
versity  Press  guesses  (I’d  call  them  reports 
but  that  implies  more  precision  than  is  the 
case)  have  between  100,000  and  500,000 
machines  compromised.  In  the  past  few 
days  there  has  been  a  lot  of  speculation 
that  one  of  the  aims  of  SoBig,  other  than 
the  propagation  of  the  species,  was  to  set 
machines  up  to  be  used  in  the  future  for 
relaying  spam. 

A  recent  Boston  Globe  report  said  distrib¬ 
uted  denial-of-service  attacks  have  hit  anti¬ 
spam  blacklist  services  hard. 

These  services  maintain  spam  relay 
address  lists  so  ISPs  and  companies  can 
block  all  incoming  mail  from  them.These 
services,  while  controversial,  have  been 
quite  effective  in  reducing  the  amount  of 


spam  that  gets  through  to  the  places 
using  them. 

Between  SoBig  and  the  blacklist  attacks, 
the  bad  guys  are  in  full  counterattack. 

Some  people  are  trying  to  fight  back. 
EarthLink  and  Amazon.com  filed  suits 
against  spammers  or  online  marketers 
within  a  few  days  of  each  other. 

But  that  is  a  long  row  to  hoe. 

The  FTC  chair  mostly  seemed  to  be 
hoping  for  a  technical  solution  to  the 
spam  problem  —  don’t  hold  your  breath. 
Meanwhile  maybe  Congress  can  make  it 
easier  for  the  FTC  and  others  to  attack 
the  attackers  and  the  FTC  can  be  less 
despondent. 

Disclaimer:  At  Harvard,  guesses  are 
called  “research.”  The  above  is  my 
“research.” 

Bradner  is  a  consultant  with  Harvard 
University’s  University  Information  Systems. 
He  can  be  reached  at  sob@sobco.com. 
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manage  heterogeneous  servers, 
storage  and  other  systems. 

“We’re  getting  to  the  point  where 
a  lot  of  these  functions,  whether 
it’s  remote  control  or  asset  man¬ 
agement  are  getting  pretty  good, 
but  there  is  still  a  lot  of  room  to 
smooth  things  out,”  Eunice  says. 
“Patch  management  is  a  good 
example  . . .  I’ve  heard  from  two  or 
three  vendors  about  substantial 
improvements  in  the  precision 
that  you  can  get  [from]  those 
patches  and  in  the  security  model 
for  handling  those  patches.” 

Analysts  don’t  tend  to  track  rev¬ 
enue  for  low-level  hardware  man¬ 


agement  tools  because  they  ship 
with  servers.  But  the  overall  infra¬ 
structure  performance  manage¬ 
ment  market,  which  includes  serv¬ 
er  management,  is  pegged  at 
about  $5  billion,  according  to 
Giga  Information  Group. The  firm 
says  BMC  Software  leads  the  serv¬ 
er  management  segment,  fol¬ 
lowed  by  IBM  Tivoli,  CA  and  HP 
HP  is  moving  ahead  of  competi¬ 
tors  with  its  low-level  server  man¬ 
agement  tool,  analysts  say  as  it 
preps  an  update  to  Insight  Man¬ 
ager  that  will  let  users  manage 
Unix,  Linux  and  Windows  servers 
from  one  console  —  something 
that  today  must  be  done  by  hop¬ 
ping  from  console  to  console.  HP 
is  expected  to  soon  begin  ship- 


Management 

nightmare 

With  each  patch 
application  taking  about 
three  to  four  hours, 
Meta  Group  estimates 
system  administrators 
spend  up  to 

1,920 

hours  per  month 
manually  applying  three 
or  four  patches  to  120 
servers. 


ping  the  tool,  code-named  Nim¬ 
bus  —  an  amalgamation  of  Insight 
Manager  —  which  manages  its 
Intel-based  ProLiant  servers,  and 
Servicecontrol  Manager,  which 
handles  HP-UX,  its  version  of  Unix. 

Another  vendor  focused  on 
managing  heterogeneous  systems 
is  Amphus,  which  was  founded  in 
2000  as  a  blade  server  company 
but  now  focuses  on  server  man¬ 
agement.  It  recently  rolled  out  an 
update  to  its  ManageSite  server 
management  software  to  support 
heterogeneous  servers  with  Intel¬ 
ligent  Platform  Management  Inter¬ 
face  so  users  can  provision,  mon¬ 
itor  and  manage  any  IPM1  server 
from  one  console.  Dell,  Intel,  HP 
and  NEC  developed  1PMI  to  de¬ 
fine  standard  interfaces  for  mon¬ 
itoring  and  managing  servers. 

Standards  change  everything 

Analysts  say  standards  such  as 
IPM1,  Web-based  Enterprise  Man¬ 
agement,  Common  Information 
Module  and  SNMP  will  become 
more  important  as  vendors  recog¬ 
nize  the  need  to  manage  hetero¬ 
geneous  platforms  and  systems, 
and  to  do  it  without  requiring  the 
time-consuming  task  of  updating 
agents  on  individual  servers. 

“It  all  comes  down  to  keeping 
[servers]  available,  maintained 
and  performing,  all  this  while  not 
requiring  an  army  of  administra¬ 
tors  that  explode  our  [total  cost  of 
ownership] says  Ulrich  Seif,  CIO 
at  National  Semiconductor  in 
Santa  Clara. 

Seif  says  he’s  looking  for  more 
than  what’s  offered  in  server  man¬ 
agement  products  today. 

“Ideally,  we  would  like  deploy¬ 
ment  functionality  to  inventory 


build,  patch  and  update  servers 
from  a  central  networked  source 
[operating  system,  software,  patch¬ 
es,  BIOS,  firmware,  drivers]  with 
minimal  server  interruption,”  he 
says.  “Then  we  would  like  a  rea¬ 
sonably  priced  monitoring  tool  to 
provide  scalable,  application-spe¬ 
cific  —  operating  system,  SQL 
database,  e-mail  —  monitoring 
with  efficient  logging,  robust  pro¬ 
cess/performance  rules  and 
alerts,  and  graphic,  Web-based 
reporting.” 

Rick  Beebe,  manager  of  systems 
and  network  engineering  at  Yale 
University  School  of  Medicine  in 
New  Haven, Conn., says  one  of  his 
biggest  server  management  prob¬ 
lems  is  controlling  access  to 
servers.“Managing  access  is  [a]  ... 
big  resource  consumer]’ he  says. 

Controlling  access  to  network 
resources  is  an  area  where  ana¬ 
lysts  expect  server  management 
vendors  to  focus.There  are  larger 
numbers  of  administrators  work¬ 
ing  on  these  servers,  and  [server 
management  tools]  are  gaining 
capabilities  like  hierarchical  ac¬ 
cess  so  you  can  have  some  admin¬ 
istrators  who  are  really  king  of  the 
crowd,  while  others  can  only  con¬ 
trol  some  servers  or  some  func¬ 
tions,”  Eunice  says. 

What  users  want 

James  Olson,  CIO  at  Waterbury 
Hospital  in  Connecticut,  says  he’s 
looking  for  management  tools 
that  will  let  him  get  a  good  read 
on  how  servers  are  handling  spe¬ 
cific  applications. 

“In  healthcare,  we  need  prod¬ 
ucts  that  can  go  to  the  lowest  level 
of  network  device  and  ascertain 
its  health,"  he  says.  “We  need  to 


centralize  the  running  to  test  ap¬ 
plications  to  ensure  devices  are 
operating  within  specifications. 
This  is  very  important  for  [Food 
and  Drug  Administration]  compli¬ 
ance,  and  the  record  keeping  is 
important.” 

Server  management  vendors 
likely  will  roll  out  this  type  of 
application-aware  capability,  says 
Corey  Ferengul,  vice  president 
and  principal  analyst  of  opera¬ 
tions  strategies  at  the  Meta  Group. 

“The  coolest  thing  in  the  works 
is  linking  these  server  manage¬ 
ment  tools  with  monitoring  and 
having  them  automatically  trigger 
deployment  or  redeployment  of 
servers  based  on  monitored 
needs,” he  says.There  is  quite  a  bit 
of  logic  generally  necessary  to 
reprovision  a  device  —  one  being 
used  for  another  purpose,  for 
example  —  but  the  logic  exists 
today  to  provision  from  a  pool  of 
waiting  devices." 

IBM,  for  instance,  is  prepping 
Tivoli  Intelligent  Orchestration 
software,  which  will  let  users  pro¬ 
vision  servers  to  automatically 
respond  to  application  demand 
and  then  reprovision  themselves 
to  run  other  applications  as 
demands  dictate. 

What  users  should  expect,  ana¬ 
lysts  say,  is  for  server  management 
vendors  to  simplify  their  tools  and 
make  it  easier  to  manage  multi¬ 
ple,  heterogeneous  servers  in  a 
way  that  links  them  with  other 
important  business  systems. 

Users  can  expect  “more  automa¬ 
tion,  more  coverage  of  software.  It 
will  not  be  enough  just  to  do  the 
server  and  the  operating  system, 
but  the  tools  will  have  to  impact 
the  software  layer  as  well.  ■ 


Tally 
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“This  is  a  significant  change  for 
us  from  being  known  as  an  asset 
management  company  to  moving 
forward  into  configuration  man¬ 
agement,”  says  Sarah  Davies,  prod¬ 
uct  manager  forTS.Deploy 
Tie  TS.Remote  portion  of  the 
Cenergy  suite  allows  for  remote 
management  of  PCs  and  devices. 

The  software  lets  users  request 
help  through  a  chat  capability  or 
for  administrators  to  perform  sup¬ 
port  without  the  user  being  pre¬ 
sent.  Tie  Discovery  Module  is  a 
lightweight  inventory'  collection 
system  that  records  hardware, soft¬ 
ware,  and  registry  and  desktop  set¬ 
tings  It  di  os  not  provide  history  and  usage  data,  which  is  part  of  Tally’s 
full  asset  management  product, TS.Census. 

t  energy  however,  integrates  with  TS.Census,  letting  users  access  the 
(  energy  tools  from  the  TS.Census  interface. 

Pricing  for  the  Cenergy  suite  starts  at  $87  per  user  for  1,000  users  ■ 
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From  PowerEdge"1  servers  featuring  Intel®  Xeorf  processors  to  network  support  products  like  PowerVault”  Storage 
and  PowerConnect”  switches,  Dell  offers  flexible,  high-performance  industry-standard  technologies  and  software 
solutions  that  are  just  right  for  your  particular  business  needs.  And  well  help  you  every  step  along  the  way.  Whether 
it's  planning  and  design,  testing  and  validation,  systems  management,  or  our  award-winning  24  x  7  service  and  support, 
Dell  will  help  you  create  an  IT  infrastructure  that's  easy  to  choose,  deploy  and  manage.  So  make  life  easy  on  yourself 
and  get  a  big  advantage  over  your  competition  -  with  a  unique  IT  solution  from  Dell. 


Dell  Rated  #1  in  Intel-Based  Server  Satisfaction 

21  Out  of  22  Consecutive  Quarters 
Technology  Business  Research 
Corporate  IT  Buying  Behavior  and  Customer  Satisfaction  Study 

First  Quarter  2003 
-July  2003 
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FILE  AND  PRINT  SERVERS 

From  entry-level  servers  to  robust  rack-mountable  solutions  that  fit  existing  infrastructures. 


NEW  PowerEdge”  400SC  Server 


Small  Business  Value  Server 

•  Intel'  Celeron* *  Processor  at  2GH? 

•  Upgradable  to  Intel'  Pentium'  4  Processor  at  3  20GHz 
with  800MHz  Front  Side  Bus1' 

•  128MB  333MHz  ECC  DDR  SDRAM  (Up  to  4GB) 

•  40GB  (7200  RPM)  IDE  Hard  Drive 

•  Upgradable  to  240GB  of  Internal  Hard  Drive  Storage 

•  Embedded  Intel'  PRO  Gigabit*  NIC 

•  1-Yr  24x7  Dedicated  Server  Phone  Tech  Support 

•  1-Yr  Next  Business  Day  On-Site  Service’ 

•  Small  Business  Pricing 


NEW  PowerEdge1”  650  Server 

Low-Cost,  General-Purpose  1U  Server 

•  Intel*  Pentium®  4  Processor  at  2.40GHz 

•  Upgradable  to  Intel®  Pentium®  4  Processor  at  3.06GHz 

•  128MB  266MHz  ECC  DDR  SDRAM 

•  Upgradable  to  3GB  of  SDRAM 

•  20GB  (7200  RPM)  IDE  Hard  Drive 

•  Upgradable  to  146GB  of  Internal  Hard  Drive  Storage 

•  ATA  100  IDE  RAID  Controller  Available 

•  Intel®  PRO  Gigabit*  NIC 

•  3-Yr  Next  Business  Day  On-Site  Service3 

•  Small  Business  Pricing 


$399 


E-VALUE  Code:  18600-  S20903g 


$1199 


as  low  as  $33/mo ,  (46  pmts*) 

E-VALUE  Code:  18600-S20911g 


SERVICES 

Purchase 

•  Dell  offers  a  wide  range  of  reliable,  award-winning  technology, 
all  delivered  from  a  single  point  of  contact  -  and  our  expert 
sales  associates  are  there  to  help  you  find  the  technology 
that's  right  for  your  business. 

Installation  -  Starting  at  S199 

•  Once  you've  selected  the  right  technology,  Dell  can  help  you 
get  it  up  and  running  quickly  and  cost-effectively  with  our 
custom  on-site  installation  and  configuration  services. 


DATABASE  AND  WEB  HOSTING  SERVERS 
Application-specific  servers  that  can  meet  most  any  challenge. 

PowerEdge”  2600  Server  NEW  PowerEdge”  1750  Server 


High-Performance  Tower  Server 

•  Intel®  Xeon*  Processor  at  2  80GHz 

•  Dual  Intel®  Xeon*  Processor  Capable  (Up  to  3  06GHz| 

•  512MB  266MHz  ECC  DDR  SDRAM 

•  Upgradable  to  6GB  of  SDRAM 

•  36GB  (10X  RPM)  Ultra320  SCSI  Hot-Swap  Hard  Drive 

•  Active  ID  Bezel  for  Manageability 

•  3-Yr  Next  Business  Day  On-Site  Service1 

•  Small  Business  Pricing 


1U  High-Performance  Rack  Server 

•  Intel®  Xeon*  Processor  at  2.40GHz 

•  Dual  Intel®  Xeon*  Processor  Capable  (Up  to  3.06GHz) 

•  256MB  266MHz  ECC  DDR  SDRAM  (Up  to  8GB) 

•  36GB  (10K  RPM)  Ultra320  SCSI  Hot-Swap  Hard  Drive 

•  Integrated  Dual-Channel  Ultra320  SCSI  Controller 

•  Active  ID  Front  Bezel  for  Monitoring  System  Health 

•  3-Yr  Next  Business  Day  On-Site  Sen/ice3 

•  Small  Business  Pricing 


$1599 


as  low  as  $43/mo„  (46  pmtsx) 

E-VALUE  Code:  18600- S20915g 


$1699 


as  low  as  $46/mo„  (46  pints*) 

E-VALUE  Code:  18600- S20916g 


Training  &  Certification  -  Starting  at  $100 

•  After  installation,  Dell  can  help  turn  your  employees  or  IT  staff 
into  experts  on  your  new  technology  through  a  variety  of 
training  and  certification  courses  -  helping  increase  your 
business'  long-term  productivity. 

Service  &  Support 

•  The  support  doesn't  end  at  the  sale.  Dell's  award-winning 
service  and  support  offerings  help  ensure  that  your  new 
network  remains  up  and  running  -  with  Web,  phone  or  on-site 
service3  and  support. 


4-WAY  SERVERS 

Handle  intense  networking  needs  with  ease. 

PowerEdge”  6600/6650  Servers 

Quad  Processing  Power  in  Rack-Mountable  or 
Tower  Form  Factors 

•  Up  to  Four  Intel®  Xeon*  Processors  at  2GHz 

•  Up  to  32GB  DDR200  ECC  SDRAM 

•  Up  to  1752GB  Maximum  Internal  HDD  Storage 

•  Embedded  Ultra  SCSI  Adaptec®  (160MB/s|  Controller 

•  Standard  Hot-Swap  Hard  Drives,  Hot-Swap  Redundant  Fans 
and  Hot-Swap  Redundant  Power  Supplies 

•  10  Hot-Plug  PCI-X  Slots 

as  low  as  $147/mo..  (46  pmts*) 

starting  at  EVALUE  Code:  18600-S20954g 


NETWORK  SWITCHES 
Design  a  powerful  network  by  enhancing  it 
with  scalable,  high-performance  switches. 


PowerConnect”  2000/3000/5000  Switches 


PowerConnecr  2000  Series  -  Starting  at  s89 

•  Affordable,  Easy-to-lnstall  Unmanaged  Switches 


PowerConnect”  3000*  Series  -  Starting  at  *549 

•  Stackable,  Enterprise-Class  Managed  Switches 

•  Advanced  Management  via  Browser  or  Industry-Standard  CLI 


PowerConnect”  5000*  Series  -  Starting  at  *1199 

•  High-Performance,  All-Gigabit  Managed  Switches 

•  Layer-3  Aware  Class  of  Service  Prioritization 


Next  Business  Day  Advanced  Exchange  Service53  Included 


STORAGE  OPTIONS 
Enhance  your  server  capabilities. 

Dell  PowerVault”  725N  NAS 


Optimized  File  Storage  Across  the  LAN 

•  Intel®  Celeron®  Processor  at  1 ,70GHz 

•  Upgradable  to  Intel®  Pentium®  4  Processor  at  2.60GHz 

•  4x40GB  (160GB)  IDE  Hard  Drives 

•  Up  to  1  Terabyte  of  Internal  Storage  Capacity 

•  Microsoft®  Windows®  Powered  Network  Attached  Storage 

C  ^  Tf  as  low  as  $49/mo.,  (46  pmts*) 

|  ]  JJrj  E-VALUE  Code:  18600- S20917n 


Dell  I  EMC 


If  you  have  more  than  300GB  of  storage,  visit  www.dell.com/storage4mybiz  for  low  prices  on 
Dell/EMC  storage  arrays. 


Solutions  that  fit. 


Easy  as 


D0LL 


Click  www.dell.com/bizsolutions  Call  1-888-405-4251 

toll  free 


If  your  order  exceeds  J25K.  a  Dell  Financial  Services  rep  will  contact  you  to  process  your  documentation  Taxes,  fees  and  shipping  charges  are  extra  and  may  vary  Not  valid  on  past  orders  or  financing.  QuickLoan  arranged  by  CIT  Bank  to  Small  Business  customers  with  approved  credit 
“This  term  indicates  compliance  with  IEEE  standaid  802  3ab  for  Gigabit  Ethernet,  and  does  not  connote  actual  operating  speed  of  IGB/sec  For  high-speed  transmission,  connection  to  a  Gigabit  Ethernet  server  and  network  infrastructure  is  required  -Technician,  replacement  part  or 
unit  (depending  on  service  contract)  will  be  dispatched,  if  necessary,  following  phone-based  troubleshooting  in  advance  of  receipt  of  returned  defective  unit.  Service  may  be  provided  by  third-party  provider.  Subject  to  parts  availability,  geographical  restrictions  and  terms  of  service 
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Proposed  provisioning  technology  set  to  go 


a  BY  JOHN  FONTANA 

A  forthcoming  XML-based  standard  is  living  a  double 
life.  It  is  expected  to  foster  integration  of  current  pro¬ 
visioning  and  identity  management  software  now 
and  will  evolve  to  support  Web  service  in  the  future. 

The  proposed  standard  is  the  Service  Provisioning 
Markup  Language  (SPML)  1.0,  which  is  set  for  ratification 
Oct.  31  by  the  Organization  for  the  Advancement  of 
Structured  Information  Standards  (OASIS). 

The  1.0  specification  is  designed  to  help 
network  executives  break  the  logjam  that 
holds  back  interoperability  among  current 
provisioning  systems.These  systems  let 
companies  automatically  set  up  and  deac¬ 
tivate  user  accounts  across  corporate  net¬ 
works  and  applications. 

But  critics,  namely  IBM  and  Microsoft, say 
SPML  in  its  1.0  form  lacks  features  beyond 
simple  addition  and  deletion  of  users.They 
say  its  not  flexible  enough  to  integrate  into 
the  palette  of  Web  services  standards  they 
are  developing,  known  asWS-*  (pro¬ 
nounced  WS-Star), which  includes  WS- 
Security  and  WS-Federation. 

The  two  companies  are  working  with 
OASIS  to  correct  those  shortcomings. 

The  protocol,  therefore,  appears  to  satisfy 
short-term  corporate  needs  while  creating 
a  starting  point  for  developing  a  long-term 
solution  that  will  work  within  Web  services 
deployments. 

“What  this  means  is  that  SPML  1 .0  will 
not  become  the  be-all  and  end-all  provi¬ 
sioning  standard,” says  Daniel  Blum,  an 
analyst  with  Burton  Group. “Something  else 
will  come  along.”  He  says  Microsoft  and 
Web  services  standards  partner  IBM,  which 
last  year  acquired  provisioning  vendor  and 
SPML  co-creator  Access360,  have  valid 
points  on  the  long-term  viability  of  SPML. 

“But  provisioning  could  take  years  to 
work  out  in  the  Web  services  framework,  so 
why  wait  for  interoperability  between  tradi¬ 
tional  provisioning  systems  and  applica¬ 
tions,”  he  says." We  should  not  let  ‘best’  be 
the  enemy  of ‘good.’ Companies  need 
something  now, so  SPML  1.0  is  a  good  first 
step.” 

It’s  a  good  first  step  because  today  differ¬ 
ent  provisioning  systems  can’t  talk  to  each  other. That  fact 
makes  it  difficult  to  link  multiple  provisioning  systems 
across  business  units  or  with  business  partners,  a  nagging 
issue  in  large  corporations,  according  to  Burton  Group. 

Provisioning  systems  also  use  proprietary  technology  to 
talk  to  the  target  systems  on  which  they  want  to  set  up  or 
deactivate  accounts,  which  forces  companies  to  use  cus¬ 
tom  connectors  from  each  target  system  to  the  provision¬ 
ing  system. 

SPML  1.0  will  foster  interoperability  on  both  fronts  and 
let  companies  focus  on  the  business  rules  for  provision¬ 
ing  user  accounts  and  not  on  the  technology  to  wire 
everything  together. 


The  interoperability  SPML  fosters  was  demonstrated  in 
July  when  10  vendors  —  BMC  Software,  Business  Layers, 
Critical  Path,  Entrust,  MyCroft,  OpenNetwork  Technologies, 
PeopleSoft,  Sun, Thor  Technologies  and  Waveset  Technol¬ 
ogies  —  held  an  interoperability  test  to  show  the  addition 
and  creation  of  users  across  their  provisioning  systems. 

“Enterprise  architects  should  start  to  consider  SPML  as 
real,  deployable  and  valuable,” says  Darran  Rolls,  chair¬ 
man  of  the  Provisioning  Services  Technical  Committee 


(PSTC)  at  OASIS  and  director  of  technology  for  Waveset. 

What’s  also  becoming  real  is  the  relationship  between 
SPML  and  the  Security  Assertion  Markup  Language 
(SAML),an  XML-based  standard  for  exchanging  user 
authentication  and  authorization  data  across  corporate 
systems  that  OASIS  ratified  in  October  2002. 

Together, SAML  and  SPML  provide  a  standard  way  to 
create  user  accounts  and  then  validate  these  users  as  part 
of  an  identity  management  infrastructure. The  two  are  the 
glue  for  integrating  Web  single  sign-on  and  provisioning 
software.  SPML  can  use  a  SAML  credential  as  one  way  to 
identify  users  to  be  provisioned  to  corporate  systems. 

Corporate  end  users  say  this  first  step  toward  integration 


needs  to  be  taken  now  to  ease  the  deploying  of  provi¬ 
sioning  systems,  which  are  desired  for  the  security  bene¬ 
fits  of  automated  account  deactivation  as  much  as 
account  creation  services. 

“Standards  are  definitely  the  No.  1  need,” says  Pete 
Narmita,  director  of  global  IT  for  a  leading  pharmaceuti¬ 
cal  company.“Any  system  that  requires  an  ID  and  pass¬ 
word  needs  to  have  a  provisioning  module,  and  it  should 
be  based  on  standards.” 

Narmita,  who  helped  build  a  provision¬ 
ing  system  for  65,000  users, says  every 
time  a  new  application  is  added,  his  com¬ 
pany  has  to  work  with  the  vendor  to  tie  it 
into  the  provisioning  system. 

“It’s  a  very  timeconsuming  and  expen¬ 
sive  process,”  he  says.  He  has  eased  the 
process  by  converting  to  Business  Layers’ 
eProvision  Suite,  which  provides  some 
application  connectors  and  plans  to  sup¬ 
port  SPML. 

Narmita  says  he  is  evaluating  SPML  and 
hopes  every  vendor  embraces  it. 

“We  are  waiting  for  the  big  guys  — 
Microsoft,  IBM,  Oracle  —  to  make  a  com¬ 
mitment,”  Narmita  says.'The  only  commit¬ 
ment  that  I  have  seen  them  make  is  to 
SAML.  But  SPML  is  the  real  key  It’s  not  one 
or  the  other,  they  work  together" 

Working  together  describes  what  is  hap¬ 
pening  now  among  IBM,  Microsoft  and 
OASIS.  For  its  part,  Microsoft  says  it  won’t 
support  SPML  1.0  because  its  features  are 
too  narrow. 

“The  specification  does  not  have  higher- 
level  provisioning  support,” says  Jackson 
Shaw,  technical  product  manager  for 
directory  services  at  Microsoft.The  proto¬ 
col  supports  adding  and  deleting  users 
but  not  suspending  or  moving  accounts, 
he  says. 

IBM  also  will  not  support  SPML  1.0, says 
Jeff  Curie,  program  director  for  Tivoli  iden¬ 
tity  management,  In  April,  IBM  asked  the 
PSTC  to  modify  SPML  to  make  it  more  flex¬ 
ible  and  align  it  with  the  WS-*  family  of 
Web  serv  ices  standards. The  PSTC  refused, 
and  IBM  abandoned  the  1 .0  specification, 
which  uses  as  its  foundation  the  Directory 
Services  Markup  Language  2.0,  an  XML 
representation  of  the  Lightweight  Directory 
Access  Protocol  (LDAP). 

“What  that  brings  with  it  is  the  limitations  of  LDAP” 

Curie  says.  He  says  those  limitations  include  the  fact  that 
SPML  is  not  a  self-describing  protocol  like  other  WS-* 
specifications.  For  example,  SPML  cannot  say  that  the 
data  in  a  field  is  a  date:  Provisioning  systems  must  already 
understand  the  SPML  format  of  a  date,  he  says. 

IBM  and  OASIS  say  they  are  working  to  address  the 
issue,  but  IBM  does  not  rule  out  creating  its  own  specifi¬ 
cation  under  theWS-*  framework. 

PSTC’s  Rolls  says  IBM,  Microsoft  and  OASIS  are  working 
on  making  SPML  a  unified  effort  that  incorporates 
requirements  from  both  vendors.* 


i  The  basics  of  interoperability 
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llun  .l,  nwiliVJ  The  Service  Provisioning  Markup  Language  1.0  proposal 
is  slated  for  ratification  this  month.  The  specification 
should  foster  interoperability  between  disparate 
provisioning  systems  and  make  it  easier  to  link 
applications  to  provisioning  software. 


Human  Resources  manager  personnel  system 
(Requesting  authority) 


Provisioning 
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Directories  Applications  Databases 


Human  Resources 
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1  A  manager  makes  a  change  in  a  personnel  system  to  add  an  employee. 

2  The  personnel  system  or  requesting  authority  constructs  a  SPML  document  and  requests  creation 
of  the  new  employee’s  accounts  across  the  company. 

3  Provisioning  System  1  takes  the  data  passed  in  the  SPML  document,  constructs  its  own  SPML 
document  and  executes  commands  on  a  set  of  internal  resources  to  create  the  employee’s  accounts 
in  applications,  databases,  e-mail  systems  and  the  like. 

4  Provisioning  System  1  also  forwards  a  SPML  request  to  Provisioning  System  2  to  add  the  employee 
to  a  401  (k)  system  running  at  a  third-party  Human  Resources  service  provider. 

5  Provisioning  System  2  executes  commands  on  a  set  of  internal  resources  to  create  the  employee’s 
401  (k)  account. 

6  Each  internal  resource  reports  back  success/failure  status  to  the  provisioning  systems  for  potential 
further  action,  such  as  notification  and  retry  on  a  failure. 


Fastlron  8 00 


mm 


Dne  architecture.  Dne  switch  family. 


Dne  solution  encompasses  your  entire  enterprise 


The  first  complete  enterprise  wiring  closet,  LAN  core,  and  data  center  solution. 

Foundry  Networks’  Fastlron  Layer  2/3  switches  let  you  deploy  a  single  architecture  .  .  _ 
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enterprise- wide  that  yields  higher  performance,  better  ROI,  and  lower  Total  Cost  AS,c  — y 

of  Ownership.  Fasti  rons  have  unparalleled  port  density:  up  to  672  10/100  ports,  232  Gigabit  Ethernet 
ports,  or  14  10-Gigabit  Ethernet  ports  in  a  single  modular  system.  Featuring  sFlow,  Fastlron  switches 
provide  w  ire-speed  network  monitoring.  Plus  the  Fastlrons  offer  superior  QoS  and  multicast  capabil¬ 
ities,  wire-speed  bandwidth  management,  and  IronShield  security.  Learn  more  about  Fastlron  today  at: 
1.888.TURBOLAN  (887-2652)  or  www.foundrynetworks.com/fi. 
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:hes  of  desk 

“At  last  I’m  free,  thanks  to 
Nokia  Motile  Connectivity 
solutions... and  it  feels  great, 

exclaims  Mary  Langer, 

I  office  manager. 

“I  thought  I  was  imprisoned  at  my 
forever  -  no  hope  of  any  release  - 
last  I’m  free.  Now  I  can  visit  more 
ers,  get  better  deals  and  work  whe 
and  however  1  want.  Am  I  happy  c 
happy.-,”  Mary  enthused  at  her 
of  freedom.  Workers  everywhere 
CEOs  to  Account  Managers  are  r 

today  at  the  thought  of  a  real  bre; 

through  m 

Secure,  working  li 

I  Reliable,  “Mobile . 
Freedom  and 

I  ntvw  Nokia  me 

I  Flexibility  make  bet 
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Introducing  a  new  era  of  secure,  corporate 
business  freedom  and  flexibility — 
Nokia  Mobile  Connectivity  solutions. 


The  desire  for  employees  to  become  more  mobile  and  productive  is 
shared  throughout  an  enterprise  —  and  this  can  now  be  realized 
thanks  to  Nokia  Mobile  Connectivity  solutions.  CIOs  and  IT  managers 
will  now  be  able  to  provide  the  mobility  and  security  of  anytime, 
anywhere  access  to  users  —  while  empowering  everyone  from  the  CEO 
to  field  salesforce  teams  with  the  information  needed  to  do  their  work 
where  and  when  they  choose.  Nokia  Mobile  Connectivity  solutions 
include  a  range  of  IPSec-  and  SSL-based  client  and  gateway  products 
that  provide  secure,  appropriate  access  to  corporate  email  and 
applications  for  mobile  employees  and  partners.  Enterprises  will 
discover  new  levels  of  efficiency  from  their  workforce,  while  giving 
them  greater  freedom  to  manage  their  business  and  personal  lives.  All 
solutions  are  easy  to  deploy  and  manage,  are  based  on  award-winning 
IP  technology  and  are  backed  by  Global  Support  and  Services. 

So  if  you  want  greater  working  freedom  that’s  IT  approved,  go 
ahead  and  escape.  Visit  www.nokia.com/mobileaccess/americas 
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NOW  GET  THE  BEST  FOR  HUNDREDS  LESS. 


We  just  lowered  our  prices  and  waived  our  installation 
fees.  And  that’s  for  the  same  premium  performance  and 
specialized  service  that  has  made  us  the  fastest-growing 
T1  data  provider  in  the  nation.  Still,  we  don’t  expect  you  to 
be  convinced  overnight.  That’s  why  we’re  giving  you 
30  days  of  no-risk  trial. 
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1  800-555-0456 
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WHY  SWITCH  TO  COVAD  DATAT1? 

•  Service  Level  Guarantees  •  4-hour  mean  time  to  repair  •  Guaranteed  99.99% 
monthly  uptime  •  Right-sized  pricing  when  we  lower  T1  fees  in  the  future 

•  Specialized  T1  Service  Team  available  live  24x7  •  Tl-dedicated,  toll-free  hotline 
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REGULATORY  AFFAIRS  ■  CARRIER  INFRASTRUCTURE  DEVELOPMENTS 


Long-haul  liber  glut'  persists 

■  BY  STEPHEN  LAWSON 


Takes 

■  Riverstone  Networks  says  it 
overstated  fiscal  2002  and 
2003  revenue  by  $98.8  million.  An 
ongoing  internal  audit  turned  up  the 
discrepancies,  which  initially  found 
that  the  two  fiscal  years  were  over¬ 
stated  by  $51.5  million.  The  internal 
review  was  prompted  by  requests 
for  information  and  then  the  launch 
of  a  formal  investigation  into 
Riverstone's  accounting  practices 
by  the  Securities  and  Exchange 
Commission. 

Separately,  Riverstone  has 
named  former  Nortel’s  Enterprise 
Networks  chief  Oscar  Rodriguez 
as  its  president  and  CEO,  succeed¬ 
ing  acting  CEO  Romulus  Pereira. 
Pereira  will  continue  to  serve  as 
Riverstone’s  chairman. 


The  “fiber  glut”  that  has  been  widely 
blamed  for  a  weak  long-haul  telecom 
equipment  and  services  market  still  exists 
in  most  areas,  but  there  are  signs  that  more 
existing  fiber  needs  to  come  online  and 
demand  might  soar  in  the  next  few  years. 

Carriers  and  industry  analysts  say  they’re 
confident  there  is  plenty  of  fiber  in  the 
ground  after  the  building  boom  of  the  late 
1990s.  However,  the  oversupply  is  bigger  in 
some  areas  than  others,  and  carriers  might 
have  to  light  up  more  fiber  pairs  now  in  the 
ground  to  meet  growing  demand. 

Unfortunately  most  companies  can’t  tap 
into  that  bargain,  long-haul  capacity  without 
going  through  the  local  loop.  For  them,  the 
cost  of  WAN  services  usually  is  dominated 
by  the  price  of  the  last-mile  connection  pro¬ 
vided  by  a  former  regional  Bell  operating 
company  says  Dave  Passmore,  an  analyst  at 
Burton  Group.  Only  10%  of  business  loca¬ 
tions  have  fiber  going  to  them,  he  says. 

“They’re  having  to  buy  network  services 


Slowdown 

Spending  on  WDM  equipment 
used  to  light  up  long-haul  fiber 
fell  from  $5.1  billion  in  2000 
to  $376  million  last  year, 
according  to  RHK. 


that  require  the  last-mile  connection,  and 
so  they’re  still  being  held  hostage  by  the 
[incumbent  local  exchange  companies],” 
he  says.  “They’re  not  in  a  position  to  take 
advantage  of  this  glut  of  fiber  in  the  core.” 

Meanwhile,  there  are  indications  that  the 
recent  deep  slump  in  spending  on  equip¬ 
ment  to  light  up  that  fiber  might  be  ending. 
Within  a  few  years,  new  ways  of  organizing 
and  using  IT  resources  might  change  the 
picture  dramatically  experts  say 

The  market  for  wavelength-division  multi¬ 
plexing  (WDM)  equipment  to  light  up 
long-haul  fiber  plummeted  from  $5.1  bil¬ 


lion  in  2000  to  $376  million  last  year  and  an 
estimated  $269  million  this  year,  according 
to  RHK  analyst  Ron  Kline.  But  RHK  expects 
revenue  to  pick  up  next  year  and  increase 
slowly  to  $307  million  by  2007.  Growth 
from  spending  by  carriers  that  are  re¬ 
sponding  to  demand  will  drive  that  recov¬ 
ery  Kline  says. 

“They  will  be  very  targeted  deployments. 
It  won’t  be  a  mass  build  like  we’ve  seen  in 
the  past,”  Kline  says. 

One  possible  source  of  that  growth  is 
Verizon,  which  plans  to  light  up  long-haul 
fiber  across  the  U.S.as  it  further  develops  its 
long-distance  voice  and  data  business,  says 
Ells  Edwards, a  spokesman  forVerizon.Most 
of  that  will  be  fiber  it  leases  from  existing 
long-haul  providers. 

AT&T  is  expanding  its  network  outside 
the  U.S.  to  meet  demand  for  data  services 
by  multinational  companies,  says  Dave 
Johnson,  an  AT&T  spokesman.  That  net¬ 
work,  which  mostly  has  capacity  leased 
from  other  carriers,  serves  120  cities. 

See  Fiber,  page  34 
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Boingo  weighs  in  on  Wi-Fi 

Boingo  Wireless  helped  pioneer  the  Wi-Fi  services 
market  when  it  launched  two  years  ago.  Now  the  company 
links  42  wireless  LANs  operated  by  others  to  give  users 
Internet  access  at  speeds  of  up  to  1 1M  bit/sec  around  the 
world.  Boingo  also  develops  software  that  the  company  says 
lets  150,000  users  sniff  out  available  hot  spots  and  provides 
encryption.  Network  World  Senior  Editor  Denise  Pappalardo  recently 
spoke  with  Boingo  President  David  Hagan  about  Wi-Fi  and  his  company. 

On  Wi-Fi  hype:  The  hype  is  great. Two  years  ago  there  wasn’t  much  interest  or 
awareness,  and  now  there  is  obviously  keen  interest. That  makes  it  easier  to  call 
large  carriers  and  talk  about  partnering. 

What  customers  want  Enterprises  are  looking  to  make  their  mobile  employees, 
their  extended  enterprise,  more  productive.  Dial-up,  to  me,  is  not  a  very  good 
solution.  I’m  a  traveler,  and  I’ve  used  dial-up  for  years.  1  cut  the  cord  and  will 
never  go  back.You’re  seeing  the  same  thing  in  the  enterprise. They  have  dial-up 
solutions  generally  today,  and  they’re  looking  to  augment  that  and  then  ulti¬ 
mately  replace  that  with  Wi-Fi.You  see  that  happening  at  a  pretty  rapid  pace. 
What  enterprises  want  is  a  secure  remote  solution.  Fiberlink  [which  sells  Boingo’s 


offering  to  businesses]  has  a  policy  management  platform  that  combines  with  Wi¬ 
Fi  and  their  dial-up  solution  so  employees  have  connectivity  wherever  they  go. 

Who’s  buying:  The  strong  market  for  Wi-Fi  right  now  is  the  business  traveler. This 
market  is  split  almost  down  the  middle  between  people  who  have  an  individ¬ 
ual  ability  to  make  a  decision  with  software  on  their  laptop  and  those  that  are 
corporately  controlled.  If  you  work  for  a  larger  company,  then  it’s  probably  cor¬ 
porately  controlled.  For  people  who  work  for  small  companies,  they  can  make 
an  individual  purchase  decision. 

Who  will  win  at  Wi-Fi:  The  big  brands.  Companies  that  already  have  a  varied  service 
model  whether  wireless  or  wired. They  can  [bundle  Wi-Fi]  with  existing  offers. 

Pricing:  We  pioneered  the  “connect  day”  concept.  A  user  can  connect  at  a  loca¬ 
tion  and  use  as  much  as  they  want,  even  go  off  and  go  back  on,  for  a  24-hour 
period.  We  have  priced  that  on  a  wholesale  basis  to  our  provider  partners  and 
at  a  retail  level.  Customers  don’t  want  to  feel  like  a  clock  is  running,  and  they 
don’t  want  to  figure  out  how  large  the  files  are  they  are  looking  at. 

Challenges:  What’s  great  about  Wi-Fi  is  that  devices  are  proliferating.  So  laptops 
are  being  produced  with  Wi-Fi  embedded.You  don’t  even  need  to  buy  an  exter¬ 
nal  Wi-Fi  card.  PDAs  are  going  in  the  same  direction. The  devices  in  the  hands 
of  the  consumers  are  out  there  and  are  going  to  be  out  there  in  large  numbers, 
so  the  challenge  is  making  sure  the  networks  are  there  to  support  those 
devices.  Get  as  much  footprint,  or  network  deployment,  as  possible  to  be  sure 
all  of  those  devices  can  connect  to  the  network. 

12-month  game  plan:  We’ll  continue  to  build  the  largest,  managed, aggregated 
network  of  Wi-Fi  networks,  license  our  client  software  to  leading  service 
providers  and  innovate  on  the  industry’s  leading  Wi-Fi  client  software.  ■ 


Service  Providers 


□ 

NetworkWorld 

9/8/03 

www.nwfusion.com 


EYE  OH  THE 
CARRIERS 


Score  one  for  the  state  of  Oklahoma, 
which  has  demonstrated  a  clearer 
grasp  of  the  issues  surrounding  MCI’s 
malfeasance  than  the  federal  government. 
On  Aug.  27,  the  state  announced  it  is  filing 
criminal  charges  against  WorldCom’s  for¬ 
mer  CEO  Bernie  Ebbers,  ex-CFO  Scott 
Sullivan  and  four  other  past  officers. 

Maximum  penalties  include  10  years  in 
jail  for  each  individual  charged.  I’m  hoping 
justice  will  be  served,  and  Ebbers  and  Co. 
will  do  some  hard  time  —  and  not  in  one 
of  those  minimum-security  resort  prisons. 


Johns  Till 
Johnson 


MCI  charges:  Oklahoma  gets  it  right 


Of  course,  lawyers  for  the  gang  of 
“alleged”  crooks  insist  the  crew  has  done 
nothing  wrong.  Fortunately,  their  case  is 
looking  weaker  and  weaker,  as  proof  of  the 
company’s  criminal  financial  activity  con¬ 
tinues  to  grow  (more  on  that  in  a  minute). 

If  there’s  one  thing  I’d  like  to  make  per¬ 
fectly  clear,  it’s  that  I  believe  in  individual 
responsibility  There’s  no  such  thing  as  the 
“entity”  of  MCI  (or  any  other  company). 
There  are  only  individual  executives, 
employees  and  shareholders.  And  let’s  not 
forget  customers  and  competitors,  who  can 
be  helped  or  damaged  by  actions  of  the 
aforementioned  individuals. 

Punishing  “MCI”  as  a  corporate  entity 
doesn’t  make  a  whole  lot  of  sense  if  the 
individual  executives  who  caused  the 
damage  are  let  off  scot-free.  Step  1  has  to  be 
punishing  the  bad  guys  —  in  particular,  the 


folks  at  the  helm  during  the  period  in 
which  MCI  engaged  in  its  criminal  activi¬ 
ties.  That’s  the  piece  the  feds  flubbed  — 
they  haven’t  even  gotten  around  to  indict¬ 
ing  Ebbers,  if  you  can  believe  it. 

Good  for  Drew  Edmondson,  Oklahoma’s 
attorney  general,  who  reportedly  said,  “I 
cannot  understand  the  federal  govern¬ 
ment  bailing  out  felons.”  Amen,  brother. 

What  about  the  growing  body  of  evi¬ 
dence  of  MCI’s  additional  criminal  behav¬ 
ior?  Several  states  are  filing  additional 
charges  against  the  company  including 
West  Virginia  (civil  charges  for  tax  fraud); 
Oregon  (civil  charges  regarding  mislead¬ 
ing  information);  Alabama  (possibly  filing 
civil  charges  for  tax  fraud  as  well  as  crimi¬ 
nal  charges);  New  Mexico  (civil  charge 
attempting  to  recoup  bond  losses).  And 
let’s  not  forget  MCI’s  competitors,  including 


AT&T  and  Verizon,  which  are  suing  for  toll 
evasion. 

To  the  extent  that  these  charges  are  sub¬ 
stantive,  they  should  be  scrutinized  by  the 
courts.  (The  tax  fraud  is  a  doozy)  If  MCI  is 
found  guilty  appropriate  action  should  be 
taken  —  I  hope  in  the  form  of  large  fines 
that  go  on  the  company’s  post-bankruptcy 
books  and  that  would  have  to  be  paid  off 
the  hard  way 

But  for  the  folks  at  the  helm  of  the  former 
WorldCom,  the  message  needs  to  be  crys¬ 
tal  clear:  “Go  to  jail.  Go  directly  to  jail.  Do 
not  pass  Go.  Do  not  collect  $200.”  Kudos  to 
Oklahoma  for  making  that  point. 

Johnson  is  president  and  chief  research 
officer  at  Nemertes  Research,  an  indepen¬ 
dent  technology  research  firm.  She  can  be 
reached  at  johna@nemertes.com. 


Fiber 

continued  from  page  33  . 

But  long-haul  fiber  is  abundant  in  most 
places.  AT&T  is  probably  far  from  exhaust¬ 
ing  the  capacity  of  networks  on  its  inter¬ 
national  routes,  Johnson  says.The  same  is 
true  of  AT&T’s  U.S.  network,  where  the 
company  has  no  major  expansions  in 
the  works. 

As  an  example  of  overcapacity,  of  the 
long-haul  fiber  that  goes  through  Chicago, 
last  year  only  3.9%  was  lit,  according  to 
TeleGeography  Of  the  lit  capacity  only  2.7% 
was  dedicated  to  IP  bandwidth  and  proba¬ 
bly  less  than  1%  was  dedicated  to  voice 


and  other  types  of  networking,  says  Tele 
Geography  analyst  Alan  Mauldin.  The  rest 
of  the  lit  capacity  was  not  deployed.  It’s 
unlikely  all  of  that  is  being  held  back  by 
carriers  as  inventory  or  by  corporations  as 
back-up  capacity  he  adds. 

Not  all  routes  are  as  wide-open.  Tele 
Choice  said  in  July  2001  that  it  had  found 
the  supply  of  already  lit  fiber  near  a  critical 
point  on  14  of  the  22  intercity  routes  it  stud¬ 
ied  in  the  U.S.  On  those  routes,  70%  or  more 
of  the  lit  fiber  was  in  use,  a  threshold  at 
which  carriers  usually  expand  capacity 

Based  on  one  growth  scenario  Tele- 
Choice  studied  that  year,  on  half  of  the  22 
routes,  all  the  lit  and  dark  fiber  would  have 


been  used  up  by  2006.  Growth  didn’t  hap¬ 
pen  at  anywhere  near  that  rate,  says  Russ 
McGuire,  who  was  lead  analyst  on  that 
report  and  is  now  an  independent  consul¬ 
tant  at  Seek  First  Networks. 

As  more  organizations  start  to  use  grid 
and  on-demand  computing  and  to  virtual¬ 
ize  their  processing  power  and  data  stor¬ 
age,  demand  for  long-haul  capacity  could 
grow  dramatically,  says  Frank  Dzubeck, 
president  of  consultancy  Communications 
Network  Architects. 

Grid  computing  brings  together  the  re¬ 
sources  of  one  or  multiple  organizations  to 
solve  computing  problems.  On-demand 
computing  lets  a  company  turn  on  capa¬ 


city  on  the  spot  based  on  how  much  power 
is  needed.  By  2005  or  2006,  those  could 
become  “virtual”  resources  that  might 
come  from  just  about  anywhere  and  use 
long-haul  capacity  along  the  way,  Dzubeck 
says.  To  be  useful,  grid  and  on-demand 
computing  eventually  will  require  at  least 
100M  bit/sec  of  capacity  he  says. 

By  that  time,  more  consumers  will  use 
broadband  and  will  take  advantage  of 
more  bandwidth-hungry  applications,  he 
adds.  Networked  remote  sensors  also  will 
start  to  consume  bandwidth. 

Lawson  is  a  correspondent  with  IDG 
News  Service 's  San  Francisco  bureau. 
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Tired  of  Sluggish 
Network  Performance  f 


You  Need  Belden's  New  DataTwist  600e  — 

The  Only  Network  Cable  That  Guarantees  Performance  Beyond  Category  6  Standards. 

Suddenly,  as  quickly  as  Category  6  cable  performance  standards  have  been  adopted.  Belden 


has  made  them  obsolete.  DataTwist  600e  UTP  networking  cable  was  developed  not  only  to  meet 
Category  6  standards,  but  also  to  provide  significant  amounts  of  headroom  above  and  beyond 
them  —  guaranteed.  It’s  the  industry’s  only  UTP  cable  with  guaranteed  performance  to  600  MHz 

The  secret?  Belden’s  unique,  patented  Bonded-Pair  technology  that  ensures  uniform  conductor- 
to-conductor  spacing  to  eliminate  performance-robbing  gaps  between  pairs. ..coupled  with 
the  patented  e-Spline  design  that  provides  consistent  pair-to-pair  spacing 
by  placing  pairs  in  individual  chambers. 

The  result: 

•  8  dB  of  Power  Sum  NEXT  headroom  over  Category  6  —  guaranteed. 

•  Nearly  5  dB  of  return  loss  improvement  over  Category  6 
at  100  MHz  —  guaranteed. 

•  An  attenuation  margin  over  Category  6  standards  —  guaranteed. 

•  Positive  Power  Sum  ACR  to  460  MHz  — *  guaranteed. 


DuPont  is  the  sole 
supplier  ol  FEP  Tellon 
insulation  material  used 
in  the  plenum  product 


All  of  which  means  better  and  faster  performance  for  you. 
For  more  information  call  1-800-BELDEN-4  to  get  your 
FREE  copy  of  the  DataTwist  600e  New  Product  Bulletin. 

www.belden.com/networking 
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UNISYS  PRESENTS 


Robert  H.  Dorin 

Robert  Dorin,  a  member  of  Aberdeen's  server 
team,  focuses  on  server  solutions  for  high-end 
enterprise  applications.  Dorin  joined  Aberdeen  in 
1996  and  has  since  followed  Unix  and  Windows 
servers  and  platforms  and  ERP  systems.  Dorin  has 
an  ScB  in  Applied  Mathematics  from  Brown 
University,  an  MS  in  Computer  Science  from  the 
State  University  of  New  York  at  Buffalo,  and  an 
MBA  from  Northeastern  University. 


theEXPERT 

A  few  minutes  with  Robert  Dorin, 

Vice  President,  Research 
Enterprise  Sen/er  Solutions 
Aberdeen  Group 


Changing  the  Economic  Equation 


>  Do  you  think  “Business  Intelligence”  for  the 
entire  enterprise  is  reality,  and  why? 

The  concept  of  Bl  for  the  enterprise  is  reality  for  some 
enterprises,  but  not  for  many.  Many  organizations  still  ana¬ 
lyze  business  data  behind  closed  doors  and  pass  the  direc¬ 
tives  down  to  business  managers  who  understand  neither 
the  framework  of  the  data  that's  been  examined  nor  the 
context  for  the  decisions  that  are  being  made. Technology 
is  available  to  deliver  Bl  for  the  enterprise,  but  each  orga¬ 
nization  must  decide  how  to  implement  access  to  data 
across  different  business  units  and  departments. 

“The  ability  to  react 
and  respond  quickly 
to  buying  patterns 
and  other  external 
events  is  critical  to 
gaining  advantage.” 

>  What  advances  are  being  made  within 
organizations  to  forward  decision-making 
at  all  levels  of  the  organization? 

This  relates  back  to  the  first  question.  When  different 
departments  within  an  organization  are  able  to  work  from 
a  common  data  analysis  framework — for  example,  how 
revenues,  profitability,  and  other  key  performance  indica¬ 
tors  (KPIs)  are  being  measured — the  potential  for  accu¬ 
rate  and  consistent  decision-making  is  much  greater.  Bl 
products  provide  the  technology  to  deliver  such  a  com¬ 
mon  framework. 

>  Can  “Business  Intelligence  for  the  Masses” 
create  a  strategic  competitive  advantage  for 
an  organization  against  its  competition? 

Absolutely.  The  ability  to  react  and  respond  quickly  to 
buying  patterns  and  other  external  events  is  critical  to 
gaining  advantage.  Complex  data  analytics  capabilities  are 
valuable,  but  the  ability  to  share  the  data  and  the  result  of 


the  analysis  not  only  within  an  organization  but  also 
between  partners — for  example,  a  retail  outlet  and  its 
suppliers — is  extremely  powerful. 

>  What  has  changed  from  the  traditional  Data 
Warehousing  efforts  of  the  90s  to  the 
Business  Intelligence  projects  that  are  being 
implemented  today?  (users,  cost,  application, 
process) 

Obviously,  PCs  and  Web  browser  access  are  more  ubiqui¬ 
tous  today  than  they  were  even  1 0  years  ago.  Data  shar¬ 
ing  enhances  the  level  of  cooperation  among  departments 
and  among  business  partners.  While  Bl  software  ranges 
from  high-end  (i.e.,  expensive)  analytics  to  less  sophisti¬ 
cated  (Excel-driven)  tools,  the  infrastructure  to  deliver  Bl 
to  many  more  users  in  the  enterprise  is  inexpensive  and, 
in  most  cases,  already  in  place. 

>  In  today's  economy,  which  businesses  or 
business  practices  have  the  most  to  gain 
from  Business  Intelligence? 

Those  businesses  that  are  able  to  make  changes  in  their 
product  marketing  quickly  and  frequently  can  benefit  a 
great  deal  from  Bl.  Retail  businesses  such  as  consumer 
packaged  goods  manufacturers  are  constantly  making 
pricing,  packaging,  and  placement  decisions.  Banking  and 
financial  services  similarly  function  in  a  dynamic  and 
volatile  environment. With  many  businesses  accessible  to 
their  customers  online,  data  can  be  gathered  almost 
instantaneously  after  implementing  a  change.  Bl  plays  a 
critical  and  fundamental  role  to  online  services,  such  as 
eBay,  amazon.com  and  the  travel  sites. 

For  more  information,  please  call  800-874-8647 
x385  or  visit  www.unisys.com/bi 
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Done: 

JetBlue  Airways  worked  with  Unisys  to  extend 
its  standardization  on  Microsoft®  Windows® 
to  the  enterprise  level.  Our  experience,  support 

and  comprehensive  services  bring  mission-critical 

m 

reliability  and  simplified  control  with  our  ES7000 
enterprise  server.  It  scales  to  32  Intel®  Xeon1M 
processors  for  massive  power  and  efficiency. 

And  the  money  JetBlue  saves  managing  its  data 
center  it  puts  back  into  keeping  fares  low  and 
customer  satisfaction  high.  After  all,  the  more 

control  you  have  over  costs  and  complexity,  ' .  Y 

•  .  •  .  ..  - 

the  more  competitive  edge  you  achieve. 

‘  i 

Servers  and  Services  with  precision  thinking, 
relentless  execution  to  drive  your  vision  forward. 


Imagine  it.  Done. 


unisys.com  1.800.874.8647  x371 


Imagine  it: 

Changing  the  model  of  the  data  center  to  reduce 
complexity.  And  gaining  control  over  costs  and 
services  for  each  customer. 
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You  Never  Know  When  It's  Their  Time  To  Go 


ConsoleWorks 

,  i.  \  . 


ConsoleWorks® 

Independent  of  the  network, 
ConsoleWorks  is  connected  via 
a  serial  or  network  console  port 
to  continuously  monitor,  audit  and 
log  information  about  the  health 
of  each  network  component. 


Someone  logged  onto  your  network  at  3  a.m.  At  4  a.m.  your  most  critical  server  died. 
Coincidence?  With  ConsoleWorks®  from  TDi,  you  would  know.  You  also  would  know 
who  was  connected  to  the  device,  what  they  did  to  that  device,  what  caused  the 
failure,  and  what  was  done  to  bring  the  device  back  up.  Are  you  ready  to  brief  your 
CTO  this  morning  with  that  level  of  detail?  Using  ConsoleWorks,  you  get  a  scalable 
solution,  world-class  support,  updated  products,  enhanced  security,  aggregation,  and 
features  that  go  above  and  beyond  any  similar  product.  It's 
also  simple  to  install.  Contact  us  at  +1.800.695.1258  or  visit  us 
at  www.tditx.com/netad.  Call  us.  Know  your  devices  are  secured. 

TECSys 

+  1.800.695.1258  I  WWW.tditX.com  Development 


ConsoleWorks  Is  a  registered  trademark  of  TECSys  Development,  LP. 


XKMS  does  the  heavy  work  of  PKI 


■  BY  RICH  SALZ 

Public-key  infrastructure  is  well  suited 
for  securing  Web  services,  but  PKI  deploy¬ 
ment  is  too  cumbersome  and  costly  for 
the  technology  to  achieve  widespread 
use.  An  upcoming  standard  from  the 
World  Wide  Web  Consortium  aims  to 
reduce  the  costs  of  PKI  without  sacrificing 
its  benefits. 

XML  Key  Management  Specification 
(XKMS)  borrows  the  best  of  PKI  without 
reducing  scalability  or  security  XKMS  cre¬ 
ates  a  trust  service  that  shields  clients 
from  complexity  by  providing  an  XML 
interface  to  PKI. The  proposed  standard  is 
in  the  last-call  phase  with  the  W3C  and 
several  vendors  are  starting  to  develop 
XKMS  toolkits  and  applications. 

PKI  scales  well  because  it  does  not 
require  an  online  service  such  as 
Kerberos  Key  Distribution  Center.  Because 
Kerberos  uses  shared-secret  cryptography 
it’s  a  likely  target  for  hacker  attacks.  And 
because  it  contains  so  much  sensitive 
information,  it  is  usually  not  widely  repli¬ 
cated,  making  it  a  potential  single  point  of 
failure. 

PKI  avoids  both  of  these  issues  by  using 


Got  great  ideas  P 


■  Network  World  is  looking  for  great 
ideas  for  future  Tech  Updates.  If  you 
want  to  contribute  a  primer  on  a  spe¬ 
cific  technology,  standard  or  protocol, 
contact  Amy  Schurr,  senior  managing 
editor,  features  (aschurr@nww.com). 


a  set  of  public  and  private  keys:  Private 
keys  are  held  only  by  an  individual  party; 
public  keys  can  be  distributed  widely. With 
a  PKI-secured  message,  an  online  service 
such  as  the  KDC  is  not  needed  for  any  two 
parties  to  communicate  securely  In  addi¬ 
tion,  the  ability  to  have  a  hierarchical  key 
structure,  and  real-time  analysis  of  the 
path  through  the  hierarchy,  makes  it  possi¬ 
ble  for  parties  to  securely  communicate 
without  prior  business  arrangement. 

With  XKMS,  a  client  and  application 
server  share  an  XKMS  service  to  validate 
each  other  and  to  process  requests 
between  them.  XKMS  replaces  many  PKI 
protocols  and  data  formats,  such  as 
Certificate  Revocation  Lists,  Online  Certi¬ 
ficate  Status  Protocol,  Lightweight  Direc¬ 
tory  Access  Protocol,  Certificate  Man¬ 
agement  Protocol  and  Simple  Certificate 
Enrollment  Protocol,  with  one  XML-based 
protocol.  XKMS  also  can  be  implemented 
client-to-client,  server-to-client,  server-to- 
server.and  so  forth. 

The  XKMS  protocol  provides  three  funda¬ 
mental  operations:  locating  which  retrieves 
a  cryptographic  key  so  that  it  can  commu¬ 
nicate  securely  with  another  entity;  validat¬ 
ing,  which  makes  sure  the  key  is  active  and 
has  not  been  revoked;  and  registering, 
which  issues,  reissues  and  revokes  keys. 

Unlike  an  XKMS  service,  PKI  requires  that 
every  user  and  every  application  verify  the 
identity  of  everyone  they  communicate 
with  and  ensure  that  the  counter-party 
identity  is  appropriate  for  the  transaction 
and  that  the  identity  is  still  valid  (not  been 
revoked).  Unfortunately,  the  infrastructure 
needed  to  support  this  places  such  bur¬ 
densome  demands  on  application  devel¬ 
opers  that  it  is  difficult  to  develop  a  secure 


■  HOW  IT  WORKS 

XKMS 

The  XML  Key  Management 
Specification  secures  Web 
services.  Here,  the  protocol  is 
used  to  validate  requests 
between  a  client  and 
application  server. 


t 


XKMS 

server 


Client 


1 


-O- 

App  server 


O  Client  validates  application  server  via 
XKMS  service. 

0  Client  sends  a  request  to  application 
server. 

©  Application  server  validates  the  request 
via  XKMS  service. 

©  Application  server  processes  client 
request. 


application  that  achieves  these  goals. 

Traditionally,  with  PKI  all  trust  decisions 
are  offloaded  to  the  crypto  consumer. This 
requires  complicated  programming  librar¬ 
ies  and  configuration  information.  For  an 
example  of  this,  look  at  the  “trusted 
issuers”  list  in  the  security  parameters  sec¬ 


tion  of  your  Web  browser. 

With  XKMS,  trust  decisions  are  given  to  a 
common  server  so  they  can  be  centralized 
and  applied  consistently  across  platforms. 
The  only  configuration  information  an 
XKMS  client  needs  is  the  URL  of  the  server, 
and  the  certificate  the  server  will  be  using 
to  sign  its  replies. Different  trust  models  can 
be  supported  by  using  different  URLs. 

XKMS  works  with  the  XML  Digital 
Signature  and  Encryption  standards.  For 
example,  the  Locate  and  Validate  opera¬ 
tions  take  a  <ds:KeyInfo>  element.  This 
means  that  a  message  receiver  can  verify 
the  identity  of  the  sender  by  “plucking 
out”  the  element,  putting  it  in  an  XKMS 
call  and  looking  at  the  servers  response. 
The  server  can  respond  with  just  the  cryp¬ 
tographic  key  (for  doing  the  signature 
math  on  small  devices  such  as  cell 
phones);  a  user-friendly  name  for  the  key 
(for  example,  mailto:rsalz@datapower 
.com,  for  use  in  browsers  and  Web  pages); 
an  assertion  about  the  validity  of  the  key 
(such  as  it  has  not  been  revoked);  or  a 
combination  of  the  three. 

Many  XML  Web  services  standards, 
including  Security  Assertions  Markup 
Language  and  WS-Security,  use  digital  sig¬ 
natures  to  protect  the  content  of  authenti¬ 
cation  and  message  data.  Although  it  has 
not  yet  received  the  publicity  that  those 
specifications  have  received,  XKMS  might 
be  the  specification  that  makes  Web  ser¬ 
vices  implementation  feasible. 

Salz  is  chief  security  officer  for 
DataPower  Technology  and  a  member  of 
the  WS-Security  and  XKMS  working 
groups.  He  can  be  reached  at  rsalz@ 
datapower.com. 


Dr.  Internal  By  Steve  Blass 

We  installed  some  workstation  packet  filtering 
firewall  software  and  found  a  large  number  of 
Internet  Protocol  2  packets  on  the  network.  What 
are  they  used  for,  and  is  this  a  threat9 

The  Internet  Protocol  2  packets  you  see  at  the 
workstations  are  Internet  Group  Management 
Protocol  (IGMP)  packets  coming  from  routers 
that  keep  track  of  memberships  in  multicast  net¬ 
work  groups.  Multicast  routers  use  IGMP  to  dis¬ 
cover  what  groups  have  members  on  their  net¬ 


works.  The  routers  send  regular  queries  to  the  “all¬ 
systems"  multi-cast  address  (224.0.0.1).  Hosts  that 
receive  the  queries  reply  with  one  "host  member¬ 
ship  report"  response  message  for  each  group  the 
host  belongs  to,  unless  they  hear  another  host 
reply  for  that  same  group  first.  Multicast  routers 
do  not  need  to  keep  track  of  every  host  in  every 
group,  they  only  need  to  keep  an  accurate  list  of 
the  active  groups.  If  the  router  does  not  hear  any 
member  reports  for  a  particular  group  within  a 
pre-set  timeout  period,  the  router  assumes  there 


are  no  active  group  members  and  will  not  forward 
multi-cast  group  packets  from  remote  domains 
for  that  group  onto  the  local  network.  IGMP  pri¬ 
marily  is  used  on  point-to-point  connections  be¬ 
tween  routers  and  hosts,  and  most  likely  does  not 
represent  a  security  threat  to  your  workstations 
by  itself. 

Blass  is  a  network  architect  at  Changc@Work  in 
Houston.  He  can  be  reached  at  dr  internet® 
changeatwork.  com. 
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GEARHEAD 
INSIDE  THE 
NETWORK 
MACHINE 

Mark 

Gibbs 


Keeping  in  line  with  Backspin’s  current 
focus  on  anti-spam  technology  and 
the  fact  that  we  just  received  an 
update  of  a  product  that  we’ve  meant  to 
review  for  some  time,  this  week  we’l!  look  at 
an  established  mail  server  with  new  anti¬ 
spam  features.  The  product  is  IMail  from 
ipswitch,  and  the  release  is  Version  8.1.  We 
started  using  this  product  a  couple  of  ver¬ 
sions  ago  and  have  been  impressed  with  its 
stability  and  features. 

IMail  supports  all  the  standard  e-mail  pro¬ 
tocols  —  Simple  Mail  Transfer  Protocol, 
POP3  and  Internet  Message  Access  Proto¬ 
col  4  —  and  also  includes  Lightweight 
Directory  Access  Protocol  Revision  3, 
Finger,  Whois  and  password  servers. 

IMail  offers  Web  Messaging  with  spell¬ 
check,  address  book  and  multiple  attach¬ 
ments,  and  Web  Calendaring  to  keep 
schedules,  appointments,  task  lists  and  date 
reminders.  Both  Web  Messaging  and  Web 
Calendaring  are  based  on  customizable 
Web  templates  so  that  you  can  provide  mes- 


Ipswitch  IMail  now  includes  anti-spam 


saging  and  calendaring  for  your  organiza¬ 
tion.  Web  Messaging  and  Web  Calendaring 
also  support  Secure  Sockets  Layer  connec¬ 
tions,  and  you  can  choose  whether  users 
must  use  SSL,  choose  to  use  SSL  or  not  use 
SSL  at  all. 

IMail  supports  multiple  domains  (five  for 
the  Small  Business  Edition  and  unlimited 
for  the  Professional  version),  so  you  can 
host  mail  for  multiple  organizations  or 
groups  on  a  single  server.  Ipswitch  claims 
impressive  scalability  to  more  than  100,000 
accounts  on  a  single  server  and  support  for 
more  than  1  million  messages  per  day 

User  account  information  can  be  taken 
from  the  Windows  NT/2000/XP  user  data¬ 
base,  or  IMail  can  use  its  own  database  or 
an  external  Open  Database  Connectivity 
(ODBC)  database.  The  advantage  of  using 
ODBC  is  that  user  information  can  be 
extracted  from  Microsoft  Access,  SQL  or 
Oracle  databases,  which  makes  it  easy  to 
integrate  the  server  with  customer  billing, 
enrollment  or  other  support  systems. 

The  IMail  server  includes  e-mail  lists  and 
supports  mail  delivery  rules  so  messages 
can  be  can  filtered  based  on  the  content. 
IMail  also  can  route  messages  to  alphanu¬ 
meric  pagers,  and  Ipswitch  offers  an  add-on 
to  send  e-mail  to  fax  machines. 

IMail  server  management  is  very  good. 


You  can  control  the  various  services  using 
the  IMail  Administrator  program  or  through 
the  administrative  Web  interface.  Part  of  the 
management  system  is  a  monitor  service 
that  watches  all  the  IMail  services,  and 
restarts  and  reports  on  services  if  they  stop. 

As  you  might  have  noticed,  many  of  these 
features  point  to  one  of  the  key  positioning 
issues  of  IMail:  It  is  designed  to  scale  to  the 
demands  of  enterprise  or  ISP  use. 

The  anti-spam  features  include  Real-time 
Blackhole  Lists  (RBL);  MAIL  FROM  verifi¬ 
cation;  Reverse  DNS  Lookup  to  verify  the 
IP  address  of  sending  servers  (this  pre¬ 
vents  spoofing);  EHLO/HELO  domain  vali¬ 
dation  (verifies  that  the  sending  mail 
server  domain  exists  in  DNS);  kill  lists 
(blocked  e-mail  addresses  and  domains); 
trusted  IP  address;  Bayesian  statistical  fil¬ 
ters;  phrase  filtering;  white  lists;  and 
sophisticated  HTML  filtering  that  detects 
nested  tables,  hyperlinks,  images,  scripts, 
invalid  tags,  mailto  links,  deceptive  URLs 
and  embedded  comments. 

The  RBLs  are  third-party  services  that  list 
the  domain  names  and  IP  addresses  of 
known  spammers.  IMail  comes  with  five 
free  third-party  RBLs  and  you  can  add  addi¬ 
tional  lists  as  required. 

When  a  message  isn’t  blocked  by  the 
blacklist  or 


Quick  takes 
on  high-tech  toys 

By  Keith  Shaw 


ate  media  card  reader 

If  you  have  a  lot  of  different 
gadgets  that  all  use  different 
media  cards,  then  you  need 
an  “all-in-one”  type  media 
card  reader. 

SanDisk  last  week 
launched  a  USB  2.0  Image- 
Mate  8-in-l  card  reader. 
The  $39.99  device  has 
four  slots  that  can  accept 
eight  storage  card  for¬ 
mats  —  Compact  Flash 
(Type  1  and  II),  Smart¬ 
Media,  Secure  Digital, 
MultiMedia  Card,  Mem¬ 
ory  Stick,  Memory  Stick 
PRO  and  the  xD-Picture 
Card.  With  USB  2.0,  the 
device  allows  faster  transfers 
(up  to  480M  bit/sec)  compared 
with  USB  1 . 1  .The  device,  however,  is 
compatible  with  USB  1 . 1  ports. 

The  media  card  reader  also 

The  SanDisk  ImageMate  8-in-l 
reader  supports  eight  media 
card  formats. 


comes  with  a  docking  station,  so  users  can 
remove  the  media  reader  from  the  docking 
station  and  attach  it  to  a  notebook  com¬ 
puter  with  a  smaller  cable. The  ImageMate 
reader  works  with  PCs  with  Windows  98SE 
or  higher,  and  Mac  OS  9.1  or  higher.  It  will 
be  available  in  stores  later  this  month, 

SanDisk  says. 

An  affordable  ultraportable? 

Having  a  lighter  notebook  is  always  a  goal 
of  ours,  but  we  often  don’t  like  sacrificing 
features  such  as  an  optical  drive  to  get  the 
lighter  notebook.  Also,  higher  prices  for  the 
ultraportables  sometimes  turn  us  away 

So  we  were  intrigued  by  the  announce¬ 
ment  last  week  by  Sharp  Systems  of 
America,  which  launched  its  Actius 
AV18P  ultraportable  notebook  for  a  price 
starting  at  $1,450. 

The  notebook  includes  integrated  wireless 
LAN  (802.11b)  connectivity  and  a  built-in  combination 
DVD/CD-RW  drive.The  notebook  measures  1-inch  thick  and 
weighs  3.9  pounds.  Other  features  include  a  low-voltage 
mobile  AMD  Athlon  XP-M  processor  1800+,  256M  bytes  of 
memory  (expandable  to  768M  bytes),  Microsoft  Windows 
XP  Professional,  and  a  40G-byte  hard  drive. 

The  notebook  has  a  battery  with  up  to  2.9  hours  of  life 
(5.8  hours  with  an  optional  add-in  battery),  and  comes 
with  a  12.1-inch  XGA  (l,024-by-768  pixel  resolution)  TFT 
LCD  screen.  The  notebooks  are  available  directly  from 
Sharp  (www.sharp.smartermall.com). 

Siemens  phone  has  hidden  keypad 

If  you’re  sick  of  a  cell  phone  that  has  its  keys  showing  all 
the  time,  and  don’t  really  get  into  the  clamshell  design 
phone,  then  Siemens  has  a  phone  for  you. 

The  company  last  week  launched  its  SL56  phone,  with  a 


is  passed  by  the  whitelist,  its  authenticity 
is  tested  first  by  checking  against  the  RBLs 
and  then  by  other  various  DNS-based 
tests.  Finally  the  content  filters  are  applied 
and  suspected  spam  is  deleted,  forwarded 
to  another  account,  or  an  X-header 
is  added. 

X-headers  are  custom  headers  added  to 
a  message  that  can  contain  any  data  and, 
in  the  case  of  IMail,  their  names  always 
begin  with  X-IMA1L-SPAM-  .followed  by  the 
condition  that  makes  them  suspect.  This 
then  lets  e-mail  clients  or  other  anti-spam 
tools  identify  potential  spam  message  for 
further  action. 

We  love  this  product.  It  is  robust  and  has 
excellent  features.  There’s  a  free  version 
called  IMail  Express,  which  supports  a  sin¬ 
gle  domain  and  five  user  accounts  but 
omits  lists  and  a  few  other  features.  There 
are  also  two  charged-for  versions:  IMail 
Small  Business,  which  costs  $695  (maxi¬ 
mum  five  domains,  10  lists  but  unlimited 
users),  and  IMail  Professional,  which  costs 
about  $1,500. 

We’re  just  starting  to  test  IMail’s  anti-spam 
features  so  we’ll  let  you  know  what  impact 
they  make  in  the  future. 

In  the  meantime,  send  a  message  to 
gearhead@gibbs.  com. 


The  SL56  keypad  slides  out 
when  you  want  to  make  a  call. 

sliding  design  that  hides  the  keypad  under¬ 
neath  the  display  The  keypad  can  slide  out  to 
make  a  call.  The  high-end  phone  includes  a 
titanium-colored  case,  a  translucent  keypad 
and  a  color  display  (4,096  colors).  Other  fea¬ 
tures  include  polyphonic  ring  tones,  voice- 
activated  dialing  and  wireless  Internet  access. 
The  phone  is  available  through  Cingular 
Wireless  ($250  with  ttvo-year  agreement). 
AT&T  Wireless  will  sell  the  phone  for  $250  late 
’  later  this  month, Siemens  says. 

New  disk  defragmenter 

Executive  Software  last  week  launched 
Version  8.0  of  its  Diskeeper  defragmenter  soft- 
ware.The  company  says  the  software  now  boasts 
a  new  user  interface,  faster  defragmentation 
engines,  terabyte  drive  defragmentation  and  an 
Administrator  Edition  that  includes  full  reporting  and  alert¬ 
ing  features.  Executive  also  says  it  also  has  a  version 
designed  for  the  Windows  2003  Server  operating  system. 

The  software  includes  a  new  “performance  index,"  which 
shows  how  much  performance  is  being  lost  on  your  system 
because  of  fragmentation.and  how  much  performance  will 
be  gained  with  a  defrag.  Also  included  is  support  for  Active 
Directory  and  Logical  Groups,  with  three  views  of  looking  at 
devices  on  a  network:  Active  Directory  view.  Logical  Group 
view  and  a  Domain/Machines  view. 

Trial  versions  are  available  at  www.executive.com.  Pricing 
depends  on  the  version  needed  and  number  of  licenses 
being  purchased,  but  the  electronic  download  version  of 
the  Professional  Edition  costs  $45. 

Shaw,  who  is  senior  reviews  editor,  cart  be  reached  at 
kshaw@nww.com. 
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EDITORIAL 

John  Dix 


Sifting 
through  the 
FGC  order 


The  FCC’s  recently  issued  order  on  local  telecom 
competition  is  a  reasonable  step  forward  but 
might  be  undermined  by  the  litigation  it  invari¬ 
ably  will  inspire. 

Cementing  positions  the  FCC  first  aired  in  February, 
the  576-page  order  changes  rules  set  forth  in  the 
Telecommunications  Act  of  1996  to  spur  telecom 
competition.  Industry  developments,  technology 
advances  and  legal  challenges  mandated  the  changes, 
the  FCC  says. 

But  nothing  as  complex  as  trying  to  direct  the  tele¬ 
com  market  comes  easy,  as  evidenced  by  the  internal 
bickering  of  FCC  commissioners.  Footnotes  are  used  to 
criticize  Chairman  Michael  Powell,  who  dissented  with 
the  majority  on  many  points  of  the  order.  One  note,  for 
example,  calls  Powell  “simply  wrong,”  and  another  says, 
“We  are  at  a  loss  to  understand  his  complaint.” 

Most  of  the  controversy  swirls  around  Section  251  of  the 
telecom  act,  which  requires  incumbent  local  exchange 
carriers  (1LEC)  to  make  elements  of  their  networks  avail¬ 
able  at  cost  to  competitors.  ILECs  want  the  requirements 
to  be  lifted,  while  new  entrants  argue  they  need  access  to 
some  of  these  1LEC  facilities  to  compete. 

As  was  evident  in  February,  the  ILECs  won  a  few  con¬ 
cessions  in  this  order  —  they  no  longer  have  to  offer 
access  to  new  fiber  loops  or  packet-switched  facilities  — 
but  the  FCC  refused  to  remove  the  bulk  of  the  sharing 
requirements. 

In  fact,  the  FCC  added  what  many  ILECs  view  as  an 
onerous  new  twist:  a  role  for  the  states  to  play  in  deter¬ 
mining  who  has  to  share  what  and  where.This  is  in 
answer  to  a  Washington,  D.C.,  circuit  court  ruling  that  criti¬ 
cized  the  FCCs  original  nationwide  policy  and  called  for 
a  “more  nuanced”  approach  to  competition. 
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USER  VIEW 

Chuck  Yoke 


Converging  with  Six  Sigma 


ometime  during  the 
next  eight  to  12 
weeks  I  should 
receive  my  Green  Belt. 
After  additional  practice  and  experience,  1  might  try 
for  the  Black  Belt,  and  ultimately  I  might  become  a 
Master. 

This  has  nothing  to  do  with  the  martial  arts;  I’m 
talking  about  Six  Sigma  certification.  Initially  devel¬ 
oped  by  Motorola  and  later  championed  by  General 
Electric,  Six  Sigma  is  a  methodology  to  eliminate 
defects,  improve  efficiency,  reduce 
costs,  increase  profits  and 
enhance  customer  satisfaction.  By 
following  a  repetitive  cycle  of 
“Define,  Measure,  Analyze, 

Improve  and  Control”  Six  Sigma 
focuses  on  creating  the  highest 
quality  at  the  lowest  cost.  (For 
more  information,  visit  the  Six 
Sigma  Forum  Web  site  at 
www.sixsigmaforum.com.) 

Does  my  immersion  into  Six 
Sigma  mean  that  I  am  abandon¬ 
ing  networks  and  moving  into  the 
manufacturing  arena?  On  the  con¬ 
trary  I  expect  Six  Sigma  to  provide 
me  with  the  skills  1  need  to  attack  two  evolving  areas 
of  network  opportunity:  converged  networks  and 
reduced  operational  costs. 

Network  convergence  will  create  a  challenge  in 
product  development  and  process  management. 
While  data  network  managers  tout  the  availability  of 
their  networks,  most  data  networks  do  not  provide 
the  same  level  of  service  as  their  voice  counterparts. 
A  data  network  that  maintains  99%  availability  is 
considered  quite  good.  However,  on  a  24-hour  by 
365-day  basis,  this  equates  to  88  hours  of  downtime, 
which  is  unacceptable  in  a  voice  network.  In  the 
voice  world,  99.999%  availability  —  the  Holy  Grail  of 
data  networking  —  is  considered  the  norm. 

To  be  successful  in  the  corporate  world, converged 
networks  will  need  to  meet  the  higher  service 


In  the  voice 
world,  99.999% 
availability  -  the 
Holy  Grail  of  data 
networking  -  is 
considered  the 
norm. 


requirements  while  still  maintaining  their  other  sig¬ 
nificant  business  advantage:  lower  costs.  A  con¬ 
verged  network  can  generate  substantial  savings  in 
consolidated  physical  plants  that  reduce  cabling 
costs,  combined  voice  and  data  infrastructure 
equipment  that  reduce  the  need  for  separate  voice 
equipment,  and  integrated  network  management 
systems  that  reduce  the  need  for  separate  voice 
management. 

While  the  potential  exists  to  offset  some  of  the 
costs  of  additional  capital  with  these  savings,  at  the 
end  of  the  day  a  converged  net¬ 
work  needs  to  provide  99.999% 
availability  and  low  latency  with 
reduced  infrastructure  and 
operational  costs.To  accomplish 
this,  network  architects  and 
managers  will  need  to  take  a 
step  back  from  technology  and 
look  at  the  network  from  a  holis¬ 
tic  perspective  that  includes  not 
only  protocols,  switches  and 
routers,  but  also  service  require¬ 
ments,  development  costs  and 
operational  costs.To  keep  devel¬ 
opment  and  operational  costs  to 
a  minimum,  areas  of  potential 
savings  such  as  process  efficiencies  or  operational 
synergies  will  need  to  be  identified.To  ensure  ongo¬ 
ing  customer  satisfaction,  post-implementation  ser¬ 
vice  levels  will  need  to  be  constantly  measured, ana¬ 
lyzed,  improved  and  controlled. 

Programs  such  as  Six  Sigma  can  provide  network 
professionals  with  the  disciplines,  skills  and  tools 
to  ensure  their  converged  networks  bring  the 
highest  level  of  quality  with  the  lowest  operational 
costs. The  future  of  converged  networking  lies  not 
in  technology,  but  in  the  overall  service  and  value 
it  brings  to  the  user. 

Yoke  is  a  business  solutions  engineer  for  a  corpo¬ 
rate  network  in  Denver.  He  can  be  reached  at 
ckyoke@yahoo.  com. 


Under  the  new  rules,  the  commission  will  maintain  a 
list  of  the  major  resources  all  ILECs  have  to  make  avail¬ 
able  to  competitors  while  states  will  consider  a  subset 
of  elements  that  are  based  on  local  market  needs. 

Although  the  FCC  says  the  approach  “offers  the  certainty 
and  stability  necessary  to  enable  parties  to  make  invest¬ 
ment  decisions,”  it  could  create  a  patchwork  quilt  of  regu¬ 
lations  that  stymies  industry  advances  and  leads  to  pro¬ 
tracted  legal  action. Time  will  tell. 

While  the  FCC  ruling  is  well  reasoned.it  is  trying  to 
address  a  wicked  problem  where  potential  solutions  can 
cause  more  trouble  than  they  solve.The  only  way  to  deal 
with  the  problem  might  be  to  get  out  of  the  way  and  let 
the  market  decide. 

—  John  Dix 
Editor  in  chief 
jdix@nww.  com 
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Not  all  rotten  apples 

So  according  to  Mark  Gibbs,  MCI  is  “rotten  to  the 
core”  (www.nwfusion.com,  DocFinder:  7522) 
Please,  Mr.  Gibbs,  take  a  job  at  this  “rotten”  company 
and  then  read  about  yourself  in  the  papers  every  day 
Look  around  at  the  honesty  and  integrity  of  your  friends 
and  associates  and  still  label  them  rotten.  Share  our  bit¬ 
terness  at  being  tarred  by  the  actions  of  a  few  executives 
who  just  couldn’t  stand  to  keep  honest  books.  Read  the 
scathing  remarks  as  you  protest  in  silent  —  and  some¬ 
times  not-so-silent  —  rage:  ‘But  most  of  us  didn’t  have  a 
damn  thing  to  do  with  any  of  that!’ 

Sorry  to  sound  bitter,  but  it’s  not  easy  doing  a  job  with 
honesty  and  integrity  then  read  that  my  co-workers  and 
I  apparently  still  make  this  company  “rotten  to  the  core.” 


Keeping  the  faith 

As  a  relative  newcomer  to  the  telecom 
world,  I  approach  my  job  with  an  excited 
naivete  and  thankfulness  in  these  tough 
economic  times.  But  you  don’t  have  to  be  a 
rocket  scientist  to  see  through  AT&T’s  tac¬ 
tics  and  attempts  to  derail  MCI’s  direction. 

Michael  Cappellas  has  addressed  the 
issues  he  inherited  at  MCI  with  straightfor¬ 
wardness  and  vigor.  MCI’s  corporate 
mantra, “Do  the  right  thing  because  it’s  the 
right  thing  to  do,”  has  been  communicated 
within  MCI  —  even  to  the  lowest  levels  of 
new-hire  such  as  myself  —  and  I  believe  in 
Cappellas  and  our  company 
Calling  an  entire  corporation  “rotten  to 
the  core”  is  unfair.  As  a  journalist,  Gibbs 
should  know  that  a  few  bad  apples  don’t 
spoil  the  whole  bunch.  I  can’t  wait  until 
MCI  emerges  from  its  restructuring.  After  all 
the  mudslinging  and  whining  is  over, 
maybe  everyone  will  realize  that  there  are 
good  things  that  come  from  competition.  I 
look  forward  to  beating  the  pants  off  AT&T 
and  all  the  other  telephone  company  com¬ 
petitors  by  being  the  best. 

Andi  Bogan 
Account  executive 
MCI  SB  Direct 
Greensboro,  N.C. 

Free  market  value 

While  I  agree  that  MCI  is  a  bad  apple,  1  dis¬ 
agree  with  Mark  Gibbs’ solution:Td  suggest 
that  we  break  them  up,  sell  them  off,  any¬ 
thing  but  allow  them  to  be  another  rotten 
apple  in  the  big-business  barrel.” 

By  “we,"  of  course  he  means  the  govern¬ 
ment,  which  is  the  only  body  capable  of 
forcibly  divesting  companies.  But  why  let 
the  same  government,  whose  own  Secur¬ 


ities  and  Exchange  Commission  guidelines 
and  accounting  rules  were  snookered  for 
so  long,  decide  how  best  to  deal  with  and 
punish  such  a  massive  fraud?  They  can  go 
after  the  executives  who  knowingly  com¬ 
mitted  fraud  and  those  who  abetted  them, 
but  that  should  be  enough.The  free  market 
will  continue  to  do  the  rest,  as  more  infor¬ 
mation  comes  out  and  investors  move  their 
money  elsewhere.  At  some  point,  MCI  will 
find  a  leader  who  sells  or  fires  the  divisions 
that  profited  from  fraud.  Let  the  free  market 
continue  to  work,  and  leave  the  govern¬ 
ment  to  do  the  prosecution. 

John  Keller 
CTO 

Metro  Power  Systems 
Atlanta 

View  from  the  trenches 

Mark  Gibbs  is  spot-on  about  everything  in 
his  MCI  rant, with  one  exception:  If  he’s  not 
terrified  of  losing  his  job  right  now,  the 
market  for  network  pundits  must  be 
healthier  than  the  market  for  techies  in 
telecom,  datacom, software  product  devel¬ 
opment  or  IT. 

Early  last  year,  I  rode  a  product  develop¬ 
ment  start-up  into  the  ground.  It  was  a  great 
little  company  with  an  existing  product  in 
a  marketplace  that  people  are  just  starting 
to  talk  about  again.  If  we  could  have  gar¬ 
nered  as  little  as  another  $2  million, we’d  be 
in  the  driver’s  seat  in  that  market  now. 
Because  of  the  bubble  burst,  it  is  lost  and 
gone  forever;  the  remnants  of  the  technol- 


Michael  Tierney 
Install  engineer,  IP/VPN  Activations 

MCI 

Hilliard,  Ohio 


ogy  were  sold  to  a  perpetual  broadband 
industry  also-ran  that  neither  understood 
nor  used  what  they  were  buying. 

So  not  being  independently  wealthy  I 
found  another  job  with  yet-another  start-up. 
Two  weeks  after  I  started  there,  they  hired  a 
“professional”  CEO  who  fired  the  founder 
and  immediately  started  milking  the  com¬ 
pany  failed  to  net  a  second  round  of 
financing  for  eight  months  and  laid  off  25% 
of  the  staff  after  finally  securing  a  disastrous 
B  round. 

Yup,  the  layoff  got  me  too,  five  sad  days 
after  I’d  accepted  an  offer  on  my  house.  I 
went  home,  sold  the  house,  moved  my 
belongings  into  storage  and  my  wife  and 
daughter  into  my  parents’  basement,  and 
started  looking  for  work. This  is  not  a  good 
way  to  live  at  4 1  years  old,  1 9  years  into  what 
was  supposed  to  be  a  rewarding  career.  It 
took  seven  weeks  of  effort  to  get  an  invita¬ 
tion  to  an  interview,  which  eventually  led  to 
an  offer,  which  I  took.  My  co-workers  who 
were  also  laid  off  the  first  of  November  did¬ 
n’t  find  employment  by  the  New  Year,  and 
two  still  haven’t.These  were  all  good  people 
with  years  of  experience  on  their  resumes 
and  good  professional  skills. 

I  consider  myself  a  fairly  strict  moralist.  I 
consider  being  a  good  citizen  and  neigh¬ 
bor  a  personal  and  professional  obligation 
to  all  humankind.  At  this  terrible  time, 
though,  my  first  responsibility  is  to  rny  fam¬ 
ily,  and  if  blowing  the  whistle  on  my  bosses’ 
bending  some  obscure  rules  for  a  little 
extra  profit  might  cost  my  family  more 


months  of  turmoil  and  disruption,  forget  it. 
If  someone’s  getting  killed, yes,  but  not  over 
something  as  Byzantine  (and  mired  in  the 
bowels  of  bad  government)  as  long-dis¬ 
tance  call  routing  regulations. 

Wes  Peters 
San  Diego 

Suspect  motives 

I  read  Mark  Gibbs’  columns  religiously  and 
generally  enjoy  them,  but  I  disagree  with 
him  on  this  one. The  total  number  of  peo¬ 
ple  at  MCI  who  have  been  accused  of  a 
crime  is  less  than  50  out  of  the  entire  com¬ 
pany.  While  many  top  executives  were 
involved  in  the  fraud,  it  doesn’t  mean  that 
entire  company  is  a  criminal  activity  and 
the  idea  of  shutting  the  company  down  for 
this  is  not  logical. The  only  parties  advocat¬ 
ing  this  are  the  other  carriers,  and  their 
motives  are  rather  suspect.  Eliminating  a 
major  competitor  will  only  harm  the  end 
users  and  the  public  at  large. 

Furthermore,  the  call  routing  cited  by 
AT&T  might  not  be  illegal  (unless  it  carried 
classified  traffic), and  no  one  has  claimed  it 
is.  AT&T  has  claimed  that  this  practice  con¬ 
stitutes  some  kind  of  fraud  but  has  not 
made  much  of  a  case.  I  suspect  this  issue 
will  go  away  and  wouldn’t  be  a  bit  sur¬ 
prised  to  find  that  all  the  carriers  (includ¬ 
ing  AT&T)  do  the  same  thing. 

A  few  rotten  apples  don’t  mean  a  com¬ 
pany  is  rotten  to  the  core,  and  what  Gibbs 
recommends  punishes  the  good  apples, 
not  the  bad  ones.  Bad  idea  all  around. 

Jeff  Held 
Washington,  D.C. 

No  ethics  in  business 

There  is  no  such  thing  as  ethics  (or 
morals)  in  business.  There’s  plenty  of  lip 
service,  plenty  of  “guidelines”  and  “initia¬ 
tives”  for  employees,  but  the  bigger  the 
company  and  the  higher  you  go,  the  deep¬ 
er  the  rot. 

I’ve  worked  for  several  companies,  and 
the  federal  government,  over  the  past  40 
years  and  have  found  this  to  be  true  in 
every  case. Small  companies  cheat  on  their 
taxes,  software  licenses,  federal,  state  and 
local  regulations.  Large  companies  just 
have  more  ways  of  cheating.  Business- 
friendly  Republican  administrations  write  a 
blank  check  for  this  sort  of  behavior. 

Honest  employees  are  forced  to  go  along 
with  the  flow  to  remain  employed.  In  the 
inevitable  recession  and  poor  job  market 
that  accompanies  a  Republican  president, 
they  cannot  afford  to  lose  their  jobs. 

In  a  more  perfect  world,  MCI  would  auto¬ 
matically  be  barred  from  all  federal  con¬ 
tracts  (as  would  any  company  caught 
“south”  of  the  law).  The  executives  would 
be  responsible  for  repaying  all  the  losses 
and  serve  jail  sentences. 

David  Easter 
Fallston.Md. 
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1  -  •  .  ay  tne  Wireless  Ethernet  Compatibility  Alliance  and  is  authorized  to  carry  the  Wi-Fi  logo  ‘For  ThinkPad  and  NetVista  models  without  a  separate  video  card,  memory  supports  both  system  and  video  Accessible  system  memory  may  be  up  to  64MB  less  than  the 

a'eo  cpe-'dng  on  video  mode  *68  -  1.000  000.000  bytes  when  referring  to  storage  capacity  Accessible  capacity  is  less;  up  to  3GB  is  used  in  service  partition.  ‘These  model  numbers  achieved  eTestmg  Labs.  Inc.  s  BatteryMark"  4.0.1  or  the  Ziff  Davis  Media.  Inc.’s 
6  ■  -es»  •  •  '  -  002  BatteryMark  Version  1  0  Battery  Rundown  Time  of  at  least  the  time  shown.  This  test  was  performed  without  independent  verification  by  the  VeriTest  testing  division  of  Lionbndge  Technologies,  Inc.  CVeriTest")  or  Ziff  Davis  Media,  Inc.;  neither  Ziff  Davis 

•••  or  Vt  riTest  \.kes  any  representations  or  warranties  as  to  these  test  results  Wmstone  is  a  registered  trademark  and  BatteryMark  is  a  trademark  of  Ziff  Davis  Publishing  Holdings,  Inc.,  in  the  U  S.  and  other  countries  A  description  of  the  environment  under  which  the 

test  .•.as  pr  . -  is  available  at  ibm.com  po'wvi  ihinkpadbatterylite  Battery  life  (and  recharge  times)  will  vary  based  on  many  factors  including  screen  brightness,  applications,  features,  power  management,  battery  conditioning  and  other  customer  preferences  Includes  battery 

and  optional  travel  o.  :ei  nstead  of  standard  optical  drive  in  Ultrabay  bay.  if  applicable,  weight  may  vary  due  to  vendor  components,  manufacturing  process  and  options.  Thinness  may  vary  at  certain  points  on  the  system  ‘Some  software  may  differ  from  its  retail  version  (If  available) 
ano  may  not  include  user  manuals  or  all  program  functionality.  Software  license  agreements  may  apply.  ‘Telephone  support  may  be  subject  to  additional  charges.  If  a  machine  is  listed  as  having  "Onsite  service  for  select  repairs'  or  "Limited  onsite  service,"  this  means  that  onsite 
service  is  available  only  'or  tne  replacement  of  select  parts.  For  all  other  warranty  repairs.  IBM  will  provide  the  customer  a  replacement  part  for  customer  installation.  The  parts  for  which  onsite  service  is  available  vanes  by  machine,  but  may  include  the  processor,  power  supply. 


Take  off  to  parts  unknown  with  an  IBM  ThinkPad®  wireless  notebook. 
The  world’s  easiest  way  to  switch  between  wired  and  wireless. 

Wherever  you  want  to  work,  the  sky  is  the  limit  when  you  have  IBM  ThinkPad 
notebooks  with  Access  Connections  software  and  wireless  Intel®  Centrino™  mobile 
technology  (on  select  models).  Now  it’s  easier  than  ever  to  switch  between  wired  and 
wireless  networks  -  whether  you’re  at  an  airport,  the  office,  an  Internet  cafe,  even 
your  kitchen.1  So  consider  the  IBM  ThinkPad  wireless  notebook,  and  experience  a 
whole  new  level  of  wireless  possibilities,  think  frGGdOm 


1  866  723-4971  I  ibm.com/shop/m337 

Save  on  shipping.  Order  online.11 


NEW!  IBM  ThinkPad  T40 

Distinctive  IBM  Innovations: 

•  Access  Connections  -  easiest  wired  and 
wireless  connectivity 

•  IBM  Embedded  Security  Subsystem  2.0? 

System  Features: 

•  Intel  Centrino™  mobile  technology 

-  Intel  Pentium  M  processor  1.3GHz  supports 
Enhanced  Intel  SpeedStep  technology  ■ 

-  Intel  PRO/Wireless  Network 
Connection  802.11b3 

•  14.1“  XGA  TFT  Display  (1024x768) 

•  256MB  DDR  SDRAM  std/2GB  max' 

•  30GB  hard  drive5 

•  Ultrabay™  Slim  DVD-ROM 

•  5.0-hr  battery  life6  •  4.5-lb  travel  weight' 

•  Microsoft"  Windows  XP  Professional* 

•  1-yr  system/battery  limited  warranty'1 


*1 ,549 


m  NavCode  2378D2U-M337 

ServicePac  Service  Upgrade:'0 
3-yr  Onsite  Repair/9x5/Next  Business 
Day  Response 
(#30L9195)  *243 

NEW!  IBM  ThinkPad  R40 

Distinctive  IBM  Innovations: 

•  Access  Connections  -  easiest  wired  and 
wireless  connectivity 

•  IBM  Embedded  Security  Subsystem  2.0' 

System  Features: 

•  Intel"  Centrino™  mobile  technology 

-  Intel  Pentium"  M  processor  1.3GHz  supports 
Enhanced  Intel  SpeedStep'  technology?  , 

-  Intel  PRO/Wireless  Network  .. 

Connection  802.11b' 

•  14.1"  XGA  TFT  Display  (1024x7681 

•  256MB  DDR  SDRAM  sid/IGB  max 

•  20GB  hard  drive 

•  Ultrabay  Plus  CD-RW. DVD-ROM  combo  drive 

•  6.1  -hr  battery  life  -  S.d-it>  Jmvet  weight 

•  Microsoft3  Wirfd'o'jvsT.XP' Professional 

•  1  -yr  system/baffery  Jifritted.  warranty 

*1,299* 

•s;  Business 


heat  sink,  system  board  or  base  cover  To  determine  the  complete  list  of  parts  for  which  onsite  service  is  available  for  a  particular  machine,  contact  IBM.  IBM  will  attempt  to  diagnose  and  resolve  any  problems  remotely  before  sending  a  replacement  part  or  technician. 'These  services 
are  available  for  machines  normally  used  for  business,  professional  or  trade  purposes,  rather  than  personal,  family  or  household  purposes.  Not  all  machine  types  and  models  are  covered.  Service  period  begins  with  the  eouipment  date  of  purchase.  Service  must  be  purchased  during 
the  original  limited  product  warranty  period.  Service  levels  are  response-time  objectives  and  are  not  guarantees.  A  service  technician  is  scheduled  to  arrive  at  your  location  within  two  or  four  business  hours  or  the  next  business  day  (depending  on  service)  after  remote  problem 

determination  is  completed.  For  the  9x5x4-hour  service,  calls  dispatched  after  1 :00  p.m.  local  time,  you  can  expect  the  service  technician  to  arrive  by  the  morning  of  the  next  business  day.  For  noncritical  service  requests,  a  service  technician  will  arrive  by  the  end  of  the  following 

business  day.  It  the  machine  problem  turns  out  to  be  a  Customer  Replaceable  Unit  (CRU),  IBM  will  express  ship  the  part  to  you  for  quick  replacement.  Onsite  24x7x2-hour  service  is  not  available  in  all  locations.  External  peripherals,  such  as  racks,  tape  drives  and  channel  controllers 
require  their  own,  separate  service  coverage;  they  are  not  covered  under  the  attached  Machine.  Service  activation  is  required  immediately  following  purchase.  For  ThinkPad  notebooks  requiring  LCD  or  other  component  replacement,  IBM  may  choose  to  perform  service  at  the  depot 
repair  center.  For  failing  non-IBM  components,  customer  must  provide  replacement  part  unless  IBM  has  a  Technical  Support  Agreement  with  the  manufacturer.  Service  does  not  cover  accessories,  supply  items  and  certain  parts  such  as  batteries,  frames  and  covers.  Standard 
shipping  included  when  you  order  online.  U.S.  only.  ’’With  Intel  SpeedStep,  processor  speed  may  be  reduced  to  conserve  battery  power.  IBM  reserves  the  right  to  alter  product  offerings  and  specifications  at  any  time,  without  notice.  JBM  is  not  responsible  for  photographic  or 
typographic  errors.  All  IBM  product  names  are  registered  trademarks  or  trademarks  of  International  Business  Machines  Corporation  in  the  U.S.  and  other  countries.  Lotus  and  SmartSuite  are  registered  trademarks  of  Lotus  Development  Corporation,  an  IBM  Company.  Intel.  Intel 
Inside,  the  Intel  Inside  logo,  Celeron,  Intel  Centrino.  the  Intel  Centrino  logo  and  Pentium  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  U.S.  and  other  countries.  Microsoft  and  Windows  are  trademarks  or  registered  trademarks  of  Microsoft 

Corporation.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others.  ©  2003  IBM  Corp.  All  rights  reserved. 


Just:  because  you  can  doesn’t:  mean  you  should 
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iPass  weaves  together  leading  networks  around  the  world,  so  you  can  connect  where  and 
when  you  want.  The  iPass®  Corporate  Access  service  gives  you  wireless,  broadband  and  dial¬ 
up  access  from  over  200  enterprise-ready  providers — delivered  with  secure  authentication, 
centralized  billing  and  management,  and  a  reliable,  consistent  connection  experience.  Try  to 

restrain  yourself.  Learn  how  to  integrate  Wi-Fi  simply,  safely  and  affordably.  View  the 
“Add  Wireless  to  Your  World”  demo  at  www.ipass.com/wireless59 
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CSI :  Lost  e-mai 


Forensic  experts 
sift  through 
electronic  data 
looking  for  key 
bits  of  evidence. 


Better  save  than  sorry 

Given  the  prominent  role  of 
technology  in  business  today, 
it’s  no  surprise  that  electronic 
data  often  factors  into  law¬ 
suits  and  compliance  issues.  E- 
mail  seems  to  play  a  key  role, 
as  demonstrated  by  several 
recent  events: 

•  In  December,  the  Securities 
and  Exchange  Commission 
fined  five  Wall  Street  titans  a 
total  of  $8.25  million  for  failing 
to  save  all  employee  e-mail  for 
three  years. 

•  In  June,  the  Massachusetts 
Secretary  of  State  fined  SG 
Cowen  Securities  $100,000 
when  the  New  York  company’s 
Boston  office  was  unable  to 
produce  e-mail  that  investiga¬ 
tors  requested. 

•  Incriminating  e-mails  —  and 

employees’  efforts  to  delete 
them  —  contributed  to  the^ 
Enron  and  WorldCom  ' 

scandals. 


■  BY  STEVE  ULFELDER 

Your  CIO  calls.  He  just  had  a  visit 
from  the  CEO,  who  just  met  with 
the  company  lawyer.  Maybe  an  ex¬ 
employee  is  suspected  of  stealing 
trade  secrets.  Maybe  a  sexual- 
harassment  suit  has  just  been  filed  against 
the  company.  Maybe  there’s  a  Securities 
and  Exchange  Commission  or  even  an  FBI 
investigation. 

In  any  case,  what  the  CIO  wants  is  e-mail.  Not  just  any 
old  e-mail  but  e-mail  going  back  five  years  from  two-dozen 
end  users,  some  of  whom  no  longer  work  at  the  company. 

And  you  just  can’t  dump  terabytes  of  raw  data  on  the 
CIO’s  desk.  You  need  to  sort  the  e-mails  by  cross-referenc¬ 
ing  them  against  a  list  of  25  keywords.  And  you  have  to 
weed  out  all  the  cc’s  and  other  forms  of  duplication. 

Oh,  and  you  need  to  produce  hard  copies  of  the  e-mails 
in  14  days,  no  ifs,  ands  or  buts. 

If  this  scenario  occurred  at  your  company,  would  you  be 
prepared  to  handle  it  with  ease  or  would  you  be  headed 
for  a  serious  meltdown? 

In  today’s  world  of  rampant  litigation  and  regulation,  even  if 
you’re  not  an  Enron  or  a  WorldCom,  even  if  your  company  is 
squeaky  clean,  it’s  wise  to  assume  that  sooner  or  later, you  will 
be  compelled  to  produce  e-mail  records. 

In  fact,  Renew  Data,  an  Austin, Texas,  computer  forensics  com¬ 
pany,  met  with  more  than  100  of  the  Fortune  500  this  year  and 
found  that  each  company  is  facing  an  average  of  125  non- 
frivolous  lawsuits  at  any  given  time.  In  any  sizeable  corpora¬ 
tion, “A  lawsuit  is  not  an  event,  it’s  a  process,”  says  Renew  Data 
CEO  Bob  Gomes. 

In  addition  to  lawsuits,  regulations  can  result  in  requests  for 
e-mails  and  other  documents.  Financial-services  firms  are 
watched  closely  by  the  SEC.  Companies  involved  with  the 
healthcare  industry  even  tangentially,  must  comply  with  the 
massive  Health  Insurance  Portability  and  Accountability  Act. 
Inquiries,  requests  for  information  and  penalties  can  come 
from  any  number  of  state,  industry  and  federal  bodies. 

The  bottom  line  is  if  you  haven’t  recently  overhauled  your 
policies  and  procedures  for  saving  e-mail,  now’s  the  time. 

Lawyering  up 

For  the  past  decade,  IT  managers  have  worked  hard  to 
strengthen  lines  of  communication  with  the  business  side  of 
the  company.  Experts  say  it’s  now  time  for  IT  to  extend  that 
effort  to  the  company’s  legal  department. 

“IT  should  not  and  cannot  dictate  the  policy”  on  saving  data, 
says  Ray  Paquet.an  analyst  at  Gartner. “This  is  fundamentally  a 
legal  issue,  especially  in  publicly  traded  or  highly  regulated 
companies.” 

When  meeting  with  your  employer’s  general  counsel,  lie  says, 
IT  should  “make  it  clear  that  you’ll  do  whatever  he  needs 
done  —  but  that  nothing  in  life  is  free.  Increased  data 
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retention  costs  money” 

Whether  companies  save  too  little  information  or  too 
much,  we  find  that  they’re  often  surprised  by  their  data 
retention,” says  Simon  Platt,  leader  of  the  computer 
forensics  practice  at  Deloitte  &  Touche  in  New  York. 
According  to  Platt,  it  is  IT’s  job  to  eliminate  this  surprise 
factor  There’s  got  to  be  communication  between  the 
CIO  and  general  counsel.  IT  can  help  [the  legal  depart¬ 
ment]  understand  how  much  email  they’re  retaining, 
how  much  of  it  can  be,  realistically  accessed  and  how 
expensive  that  will  be.  General  counsel  can  help  decide 


Retention  is  key 

When  it  comes  to  policy.  IT  groups  primarily 
will  implement  policies  created  by  lawyers. 
But  you  can  begin  following  these  proce¬ 
dures  to  protect  your  company  —  and 
yourself,  immediately: 

<  Don’t  delete  employees’  e-mail  accounts 
the  minute  they  leave  the  company.  Disable 
the  accounts  instead.  When  workers  leave 
a  company,  it  often  takes  some  time  before 
their  ex-employer  decides  to  investigate 
their  e-mail.  For  example,  It’s  common  for 
a  salesman  to  move  to  a  competitor.  But  if 
a  suspicious  number  of  his  customers  fol¬ 
low  him  a  few  weeks  or  months  later,  his 
former  company  may  want  to  see  what  he 
was  up  to  before  he  left 

<  Don’t  go  fishing.  A  "fishing  expedition"  is 
what  Michelle  Lang,  an  attorney  with  Kroll 
Ontrack  Data  Recovery,  calls  it  when  "high- 
level  executives  think  something  has  oc¬ 
curred  [on  a  worker’s  or  former  worker’s 
computer],  but  they’re  not  sure  what"  she 
says.  'They  go  to  IT  and  say,  ‘Why  don’t  you 
boot  up  that  PC  and  run  a  few  searches, 
just  to  see  what  you  can  figure  out?"  Lang 
and  other  experts  say  you  should  think 
carefully  before  obeying  such  a  request  no 
matter  who  makes  it  for  several  reasons. 
For  starters,  you  might  jeopardize  any  case 
your  company  has.  Simply  booting  up  a  PC 
can  alter  enough  metadata  to  torpedo  a 
court  case.  Moreover,  you  might  be 
ordered  to  serve  as  a  witness  during  a 
criminal  or  civil  trial.  One  recommended 
approach  is  to  archive  former  employees’ 
e-mail.  "If  you  convert  Outlook  to  a  PST  file 
and  bum  it  to  a  CD,  you’ve  got  it  for  years," 
says  Mike  Finnie,  a  forensic  specialist  at 
Computer  Forensics. 

When  e-mail  administrators  move  on  to  a 
new  job,  they  often  change  passwords  —  a 
sound  security  policy.  But  keep  a  record  of 
the  old  administrator’s  passwords  to  make 
it  easier  to  access  old  e-mail  files. 

Similarly,  if  you  reconfigure  your  e-mail 
system,  keep  a  record  of  the  old  system- 
apecifta  nomenclature.  For  example,  if  you 
...  from  Microsoft  Outlook  Exchange  Server 

-  Lotus  Notes,  Finnie  says,  it’s  a  good  idea 
•  «:ang  on  to  Exchange’s  Site  and  Or- 
on  names,  as  well  as  the  type  of 
a':,  re  used  to  create  backups. 


how  much  [e-mail]  the  company  should  be  retaining, 
then  set  and  enforce  policies.” 

Your  decision  on  how  and  how  long  to  save  e-mail 
should  merely  be  part  of  an  overall  data-retention  policy. 
IT.  legal  counsel  and  top  business  executives  should  for¬ 
mulate  this  policy,  Paquet  says,  after  considering  industry 
regulations  and  legal  precedent.  For  example,  the  SEC 
dictates  that  brokerages  must  be  able  to  produce  three 
years’ worth  of  records  “immediately”  upon  request. 

So  how  long  should  you  hang  on  to  old  e-mail?  There’s 
no  concrete  answer,  but  the  ever-declining  cost  of  stor¬ 
age  is  driving  many  companies  to  save  e-mail  for  long 
time  periods,  even  if  regulators  don’t  force  them  to. 

Solvay  Pharmaceuticals,  an  Atlanta  subsidiary  of 
Solvay  S.A.  in  Brussels,  Belgium,  recently  needed  to 
quickly  find  a  year’s  worth  of  email  messages  from  cer¬ 
tain  employees  regarding  certain  topics  (Solvay  is  reluc¬ 
tant  to  discuss  the  specifics  of  the  case). The  problem 
was  complicated  because  Solvay  uses  a  third  party  to 
manage  its  Microsoft  Exchange  servers. 

After  evaluating  various  retrieval  options,  the  company 
turned  to  Renew  Data.  Bruce  McMillan,  Solvay  s  man¬ 
ager  of  emerging  technologies,  says  the  vendor  “was  able 
to  search  through  the  e-mail  month-by-month,  capture  it, 
remove  duplications  [such  as  cc’s]  and  put  it  in  any  for¬ 
mat  we  needed”  more  quickly  than  Solvay’s  internal  IT 
staffers  could  have. 

After  that  experience,  Solvay  changed  its  data-retention 
procedures,  McMillan  says.“We  used  to  recycle  tapes 
after  a  certain  period  of  time.  Not  anymore  —  we’re  sav¬ 
ing  everything.” 

On  the  witness  stand 

Many  businesses  turn  to  e-mail-recovery  services  for 
their  expertise.“Computer  evidence  is  so  fragile  —  it  can 
be  lost  or  corrupted  so  easilyfsays  W.  Reid  Wittliff,  an 
attorney  at  Graves,  Dougherty,  Hearon  &  Moody  in 
Austin, Texas. The  firm  used  Renew  Data  in  a  trade-secret 
case.  Although  the  case  was  settled  before  it  went  to 
court, “We  needed  someone  who  could  find  the  evi¬ 
dence,  capture  and  preserve  it  so  it  could  be  effectively 
used  in  court,  and  defend  against  attacks”  by  opposing 
attorneys,  Wittliff  says. 

The  latter  point  is  important,  and  often  overlooked.  IT 
employees  on  the  witness  stand  might  be  turned  inside 
out  by  a  savvy  lawyer,  who  will  make  every  effort  to 
imply  that  they  might  have  tampered  with  the  evidence 
out  of  loyalty  to  their  employer. 

“You  need  someone  who  can  testify  and  be  neutral 
and  professional  about  what  they’ve  done  —  and  can 
explain  it  so  a  judge  or  jury  can  understand,”  says  Wittliff, 
who  was  a  computer-crimes  prosecutor  before  joining 
Graves,  Dougherty.  (Attorneys  similarly  can  attack  firms 
like  Renew  Data  on  the  basis  of  who’s  paying  their  bills, 
but  their  third-party  status  tends  to  make  them  solid  wit¬ 
nesses,  analysts  say.) 

While  many  consider  e-mail  retention  as  a  defensive 
need,  it  is  just  as  likely  to  help  businesses  prove  wrong¬ 
doing  by  others,  such  as  when  former  employees  are 
shown  to  have  stolen  proprietary  data.  Michelle  Lang,  an 
attorney  with  forensics  firm  Kroll  Ontrack  Data  Recov¬ 
ery,  recalls  a  case  in  which  a  secretary  claimed  she’d 
been  sexually  harassed  by  her  boss,  and  produced  filthy 
e-mail  messages  that  “proved”  her  case.  Using  forensic 
techniques, “We  found  she  was  using  his  account  and 
sent  all  the  emails  herself,”  Lang  says. 

Searching  for  byte  marks 

So  how  does  a  search  for  email  work?  The  process 
varies,  but  typically  a  company’s  outside  counsel 
receives  a  subpoena  or  discovery  order  from  some 
source  —  a  plaintiff’s  attorney,  for  example,  or  a  regula¬ 
tory  agency  such  as  the  SEC.  Outside  counsel  meets 
with  the  company’s  head  of  litigation.  Eventually,  general 


counsel  meets  with  the  CIO  and  explains  what  email 
must  be  produced. 

The  parameters  vary  by  case.  A  typical  large-scale  cor¬ 
porate  civil  suit  might  require  all  email  (and  user  files) 
from  the  past  five  years  for  50  employees  responsive  to 
30  keywords. 

Then  the  CIO  calls  the  IT  department  and  relays  the 
request  —  and  asks  how  long  it’ll  take  to  pull  together 
the  information. 

Which  is  when  IT  has  a  nervous  breakdown.“It’s  a  dirty 
little  secret  that  it’s  hard  to  get  information  off  back-up 
tapes,”  Renew  Data’s  Gomes  says.  Even  if  a  corporation 
never  recycles  tapes  and  labels  them  scrupulously,  it 
might  have  10,000  tapes  to  go  through,  with  untold  ter¬ 
abytes  of  data.To  pull  the  needed  information,  IT  must 
recreate  the  native  environment  as  it  was  when  the 
backup  occurred  —  the  proper  version  of  the  backup 
software,  operating  systems,  applications,  with  appropri¬ 
ate  patches,  passwords,  and  so  on.  In  a  typical  business, 
this  can  be  nearly  impossible. 

Many  businesses,  facing  time  pressure  and  the  diffi¬ 
culty  of  the  task,  call  Renew  Data  or  competitors  such  as 
Data  Recovery  Group  and  91 1  Forensic  Data.  Such  ser¬ 
vices  use  proprietary  techniques  to  recover  e-mail  with¬ 
out  restoring  the  native  environment. Their  trick  is  that 
they’ve  backward-engineered  popular  back-up  software 
such  as  from  Legato  Systems,  and  are  familiar  with  all 
the  widely  used  data  structures. 

Where  the  data  extraction  is  performed  is  determined 
partly  by  the  circumstances  of  the  case.  Renew  Data 
recently  worked  on  a  case  for  “one  of  the  largest  banks 
in  the  U.S.,” Gomes  says  (declining  to  be  more  specific). 
The  bank  didn’t  want  its  back-up  tapes  to  leave  its  facili- 
ties.This  is  typical,  and  sensible  as  well  —  data  extrac¬ 
tion  typically  requires  only  a  tape  drive, so  it’s  easy  to  do 
on  customer  premises. 

There  are  two  critical  factors  in  the  extraction  that  might 
be  unfamiliar  to  IT  professionals.  First,  when  working  with 
hard  drives  as  opposed  to  back-up  tapes  (a  common 
occurrence  because  many  users  save  some  of  their  e-mail 
to  their  own  PC), specialists  don’t  merely  copy  the  drive  — 
they  create  a  byte-for-byte  forensic  image  of  it. 

It’s  also  important  to  start  a  chain  of  custody  so  that  any 
evidence  gathered  will  stand  up  in  court.“If  we  produce 
something,  we  need  to  be  able  to  say  exactly  where  it 
came  from  under  very  aggressive  cross-examination,” says 
Kevin  Bluml.a  forensics  expert  at  Kroll  Ontrack.“Creating 
a  chain  of  custody  means  tracking  every  single  place  a 
piece  of  media  has  been,  who’s  touched  it, and  so  on.” 
This  demand  for  precision  is  one  reason  experts  discour¬ 
age  “fishing  expeditions.”  Generally,  the  actual  data 
retrieval  is  performed  at  the  vendor  company’s  site. 

Protect  yourself 

Today,  it’s  critical  that  companies  form,  implement  and 
enforce  a  data  retention  policy  with  e-mail  as  its  center- 
piece.“E-mail  messages  are  critical  business  records,” 
Massachusetts  Secretary  of  State  William  Galvin  recently 
told  The  Boston  Globe  when  his  agency  fined  SG 
Cowen.The  fact  that  [email  messages]  are  a  little  more 
casual  than  traditional  business  records  makes  them  no 
less  significant." 

Ulfelder  is  a  freelance  writer  in  Southborough,  Mass. 
Contact  him  at  sulfelder@charter.net 

More  online! 

Find  more  information  on  e-mail  retention,  read 
through  a  survey  that  reveals  a  shocking  lack 
of  e-mail  retention  policies. 
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Special  Report 

From  Network  World  Fusion 


Change  is  constant 

Enterprise  IT  and  network  infrastructures  exist 
to  serve  business  needs.  Once,  servicing 
business  needs  simply  meant  adjusting  devices 
and  technologies  to  ensure  ongoing  availability 
and  performance.  Today,  the  challenge  is  more 
complex,  calling  for  repeated  adjustment, 
change  and  tuning  of  a  near  constantly  changing 
infrastructure.  Planning,  implementing,  and,  if 
necessary,  rolling  back  change  has  become  a 
high-risk  task  where  mistakes  translate  to 
millions  of  dollars  in  lost  revenue. 
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In  this  SPECIAL  REPORT,  written  by  Rich  / 
Ptak  of  Ptak  &  Associates,  Inc.,  we  look  at  I 
how  network  IT  experts  can  address  the  | 
problems  of  planning,  managing  and  | 
tracking  dynamic  change  implementation. 

Take  advantage  of  this  free  offer  from 
Network  World  Fusion  and  secure  your 
copy  of  the  SPECIAL  REPORT: 
Enterprise  network  configuration 
change  management:  A  practitioner’s 
guide  in  PDF  format  today. 


Rich  Ptak,  Ptak  &  Associates,  Inc. 

Rich  Ptak  is  President  of  Ptak  & 
Associates,  Inc.,  an  Amherst,  NH 
based  analyst-consultant  firm 
fflm  A  providing  services  to  IT  vendors 

S»  MMsMm  anc*  er,d-users  in  the  creation 
and  application  of  management 
solutions  for  the  IT  infrastructure.  Ptak  & 
Associates,  Inc.  assists  enterprises  in 
effectively  evaluating  and  selecting  system  and 
network  management  strategies  and  solutions; 
and  network  vendors  to  analyze  changing 
market  conditions  allowing  them  to  tailor 
strategic  plans  accordingly. 
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Network  World  Fusion  offers 
a  SPECIAL  REPORT: 

Enterprise  network  configuration  change 
management:  A  practitioner’s  guide 

For  a  limited  time,  you  can  get  a  copy  of  this  SPECIAL  REPORT  in 
PDF  format,  free.  Just  visit  http^/nww1.com/go/ad411.html  to 
download  your  FREE  copy  today  (registration  required). 
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YDU  COULD  PIECE  TOGETHER  YOUR  OWN 
DISK-BASED  BACKUP  SYSTEM. 


BUT  WHY  WOULD  YDU? 


II 


The  Quantum 
DX30.  Nothing  else 
comes  close. 
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30  -  Nothing  else  comes  close. 


Not  all  disk-based  backup  is  created  equal.  More  IT  professionals  have  chosen 
to  install  the  Quantum  DX30  solution  than  any  other  disk-based  backup  product.*  And  for  * 
good  reason.  The  Quantum  DX30  delivers  complete  and  hassle-free  optimized  backup  and 
restore  functionality  to  your  data  center.  It  integrates  quickly  and  seamlessly  with  your  existing  backup 
software  and  preserves  all  of  the  processes  that  you  have  built  to  ensure  that  your  company 
has  a  bulletproof  data  protection  plan. 

Optimized  for  your  backup  environment.  RAID  arrays  designed  for  general-purpose 
storage  applications  simply  are  not  designed  to  work  with  the  tape  functionality  of  backup 

software  packages  and  require  tuning  and  management  nearly 
identical  to  that  of  your  primary  storage.  You  certainly  could  use  an  off-the-shelf 
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1.  Optimized  specifically  for  backup 
and  restore. 

2.  Installs  and  integrates  into  your  existing 
environment  in  just  minutes. 

3.  Requires  zero  disk  tuning  to  achieve  and 
maintain  maximum  performance. 

4.  Can  be  shared  with  multiple  servers 
through  VERITAS"  SSO. 

5.  Uses  existing  backup  policies 
and  procedures. 


array  to  stage  your  backup.  But  since  Quantum  has  already  taken  the  guesswork  out 
of  doing  it  yourself,  why  wouldn't  you  choose  the  DX30  for  your  disk-based 
backup  solution? 

Put  it  all  together.  Visit  us  on  the  Web  at  www.quantum.com/diskbackup 
and  enter  Code  ADV050  to  receive  your  FREE  whitepaper  entitled,  "Enhanced 
Backup  —  Delivering  Value  with  an  Optimized  Backup  Appliance." 

O  Speed.  Intelligence.  Confidence.  Simplicity. 

From  the  world's  leader  in  data  protection. 


www.nwfusion.com 
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EXCHANGE  SERVER 
2003,  OUTLOOK  2003 


Exchange  requires  Microsoft  Windows 
Server  2000  Service  Pack  3  or  Windows 
Server  2003  software.  Win  Server  2003 
provides  some  additional  functionality  to 
Exchange,  such  as  support  for  an  eight- 
node  cluster.  Also,  the  Volume  Shadow 
Copy  services,  new  in  Win  Server  2003, 
can  provide  database  replication  for  the 
Exchange  message  stores.  This  copy  of 
the  database  can  be  used  for  immediate 
failover,  or  can  greatly  widen  your  back¬ 
up  window  (if  your  back-up  software 
also  supports  Shadow  Copy). 

Win  Server  2003  is  different  than  previ¬ 
ous  versions,  with  most  of  the  services 
disabled  by  default. To  ensure  a  success¬ 
ful  Exchange  2003  installation,  new 
deployment  tools  are  included  to  help 
users  configure  Windows  Server  and 
Active  Directory  correctly,  and  then  de¬ 
ploy  Exchange  2003.  The  tools  function 
like  checklists  to  ensure  that  you’ve  fol¬ 
lowed  the  necessary  steps.  For  example, 


the  deployment  tools  not  only  explain  to 


Net  Results 


The  breakdown 

Performance  25% 

4 

Ease  of  use  25% 

5 

Installation  20% 

4 

Administration  20% 

4 

Documentation  10% 

3 

TOTAL  SCORE 

4.15 

■  Scoring  Key:  5:  Exceptional;  4:  Very  good; 
3:  Average;  2:  Below  average;  1:  Consistently 
subpar 
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Favorable  returns  on  Exchange 

TU  BY  TRAVIS  BERKLEY,  NETWORK  WORLD  GLOBAL  TEST  ALLIANCE 

he  newest  upgrade  to  Exchange  2003,  based  on  our  testing  of  the  Release  to 
Manufacturing  version,  is  a  welcome  one,  offering  performance,  security  and  anti¬ 
spam  features  that  many  users  have  longed  for. The  new  Exchange  Server  2003 
includes  an  impressive  list  of  features  and  enhancements  and  while  this  version 
might  not  boast  enough  new  features  to  lure  non-Exchange  users  to  switch,  the  veteran 
Exchange  shop  will  truly  enjoy  the  enhancements.  We  also  tested  the  latest  Outlook  2003 
client,  which  features  a  new  look  and  better  spam  filtering. 


first  configure  Active  Directory  but  also 
show  how  to  check  the  configuration.  It 
will  not  let  you  proceed  until  you’ve 
checked  off  each  task  in  the  list.  Installing 
or  upgrading,  all  at  once  or  in  pieces,  the 
deployment  manager  can  explain  how 
to  proceed. 

A  welcomed  new  feature  in  Exchange 
2003  is  the  ability  to  combat  unwanted  e- 
mail  and  spam  (Microsoft  calls  it  ‘junk  e- 
mail.’).  Exchange  now  has  some  addi¬ 
tional  filtering  available  at  the  Simple 
Mail  Transfer  Protocol  gateway,  the  entry 
point  where  the  outside  world  delivers  e- 
mail  to  you.  Messages  can  be  blocked 
based  on  the  user  or  domain  where  the 
mail  claims  to  be  from,  or  based  on  who 
the  message  is  intended  for.  Delivery  con¬ 
nection  attempts  can  be  denied  based 
on  the  origination  address.  Several  anti¬ 
spam  features  are  also  included  on  the 
new  Outlook  client. 

Another  tool  that  many  will  appreciate 
is  the  Mailbox  Recovery  Center.  In  the 
past,  if  the  Active  Directory  account 
became  disassociated  from  the  user’s 
mailbox  (through  corruption,  deletion 
and  the  like),  the  only  solution  was  to  ere 
ate  a  new,  empty  mailbox  for  that  user. 
The  Mailbox  Recovery  Center  now  gives 
administrators  the  ability  to  discover 
“orphaned”  mailboxes  and  relink  them 
with  Active  Directory  accounts.  It  also 
will  warn  of  conflicts,  for  example  if  one 
mailbox  is  assigned  to  two  users. 

Distribution  lists  also  received  some 
attention  in  this  release.  First,  the  caching 
process  was  redesigned  so  membership 
and  other  queries  against  a  distribution 
list  are  completed  much  faster.  We  didn’t 
benchmark  against  an  older  Exchange 
system,  but  Microsoft  says  that  on  aver¬ 
age,  60%  fewer  Active  Directory  queries 
are  made  in  Exchange  2003.  Instead  of 
making  a  new  query  to  Active  Directory, 
the  results  are  more  frequently  available 
in  cache.  Second,  a  new  type  of  distribu¬ 
tion  list  was  created,  the  Query-Based 
Distribution  Group.  A  query  can  be  used 
to  select  users  or  other  groups  based  on 
many  of  the  fields  in  the  Active  Directory. 


For  example, you  now  can  find  everyone 
in  sales  or  everyone  with  the  title  of  “man- 
ager.”This  query  is  executed  each  time  it 
is  invoked, so  it  is  always  current. 

Another  performance  enhancement  is 
better  virtual  memory  usage.  Exchange 
now  makes  variable  memory  requests, 
based  on  the  size  of  the  system,  instead  of 
using  “hard  coded”  values.  Older  versions 
would  allocate  many  small  blocks  of 
memory  to  perform  a  task.  Exchange 
2003  now  optimizes  these  requests  into 
fewer,  larger  requests  in  order  to  not  waste 
portions  of  memory  If  Exchange  discov¬ 
ers  that  it  is  not  configured  optimally  it 
sends  a  note  to  the  Event  Viewer  to  pro¬ 
vide  an  idea  of  what  changes  to  make. 

To  dig  into  the  documentation,  use  a 
machine  with  a  network  connection. 
While  the  documentation  is  pretty  com¬ 
plete,  it  is  all  online  at  the  Microsoft 
Technical  Library,  or  technet.  This  lets 
Microsoft  update  documentation  as 
needed,  but  it  requires  users  go  online  to 
read  it. 

It's  all  about  the  client 

While  technically  part  of  the  Microsoft 
Office  2003  Suite,  which  is  scheduled  to 
launch  on  Oct.  21,  Outlook  2003  is  the 
full-featured  client  for  Exchange  2003. 
The  software  has  received  a  bit  of  a 
facelift  with  a  different  look  and  feel; 
however,  it  is  still  familiar  enough  for  the 
veteran  user  to  find  their  way  around. 
Some  of  the  changes  are  simple,  yet  use¬ 
ful.  For  example,  message  flags  now  can 
be  done  in  six  colors.  When  you  order 
your  items,  they  can  be  separated  into 
groups,  each  of  which  can  be  collapsed 
individually. 

Probably  the  most  welcomed  feature  is 
the  junk  filters.  In  addition  to  what’s 
offered  at  the  SMTP  gateway,  each  user 
can  control  how  junk  e-mail  is  handled. 
The  junk-mail  filter  operates  in  three 
modes;  Low,  which  removes  only  the 
most  obvious  offenders;  High,  which 
catches  most  of  the  junk,  but  might  flag  a 
legitimate  message  occasionally;  and 
Safe  List  only  which  flags  all  messages 


from  everyone  that  the  user  hasn’t  pre- 
approved.You  also  can  delete  these  mes¬ 
sages  automatically  instead  of  moving 
them  to  the  junk  folder.  We  wouldn't  rec¬ 
ommend  deleting  messages  for  the 
more  aggressive  filter  settings. 

The  user  can  flag  messages  as  junk  as 
they  read  them.  An  address  can  be 
added  to  a  safe  sender  list  that  tells  the 
filter  to  accept  all  messages  from  that 
person.  Users  also  can  send  names  to  a 
Blocked  list,  which  blocks  every  e-mail 
from  that  address. 

Another  interesting  enhancement 
stems  from  the  use  of  embedded  content 
in  messages.  Sometimes  users  receive  a 
message  that  has  a  picture  or  a  banner 
embedded  in  it.  This  content  might  be 
hosted  on  an  external  Web  site.  With 
increasing  frequency,  spammers  are 
using  this  technique  to  find  which  e-mail 
addresses  are  real.  When  the  client  con¬ 
nects  and  requests  the  content,  the  Web 
server  can  request  the  e-mail  address  of 
the  requestor.  Bang!  You’ve  just  been  har¬ 
vested.  Outlook  can  be  set  to  not  auto¬ 
matically  download  this  content.  It  can 
be  set  to  not  do  it  at  all,  to  only  do  it  for 
sites  in  the  Trusted  Zone,  or  to  warn  the 
user  first. This  setting  is  one  of  the  secur¬ 
ity  options,  and  can  be  changed. 

Microsoft  also  has  taken  strides  in  com¬ 
pressing  the  Messaging  API  datastream 
when  the  Outlook  2003  client  is  connect¬ 
ed  to  the  Exchange  server.  While  an  older 
Outlook  client  can  be  used  to  connect  to 
Exchange  2003,  the  datastream  will  not 
be  compressed.  Exchange  2003  has  been 
optimized  with  buffer  packing  to  make 
the  most  out  of  each  transmission  back 
to  the  Outlook  2003  client.  After  the  data 
is  compressed,  it  is  assembled  into  larger 
packets  that  are  arranged  in  a  package 
that  minimizes  the  needed  number 
of  transfers. 

Remote  control 

To  access  your  Exchange  mailbox  from 
anywhere  on  the  Internet,  you  would 
have  to  use  Outlook  Web  Access  (OWA) 
or  fire  up  the  trusty  VPN.  Outlook  2003 
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can  be  used  to  connect  to  Exchange  2003 
using  Secure-  HTTP  thereby  gaining  an 
encrypted  connection  into  the  Exchange 
system  without  opening  new  ports  on  your 
corporate  firewall.  Exchange  2003  does  this 
by  tunneling  the  normal  Remote 
Procedure  Call  (RPC)  traffic  inside  of  HTTP 
packets. 

Additional  setup  is  required  to  gain  this 
functionality.  First,  the  Exchange  2003 
servers  must  be  running  Win  2003.  Next, you 
will  need  to  dedicate  a  server  to  be  a  front- 
end  RPC  proxy,  and  position  it  near  the 
edges  of  your  corporate  network,  perhaps 


in  the  firewall’s  demilitarized  zone.  The 
Exchange  servers  also  need  to  be  config¬ 
ured  to  accept  RPC  proxy  connections. 
Finally, you  need  to  create  a  separate  profile 
within  Outlook  2003  to  use  RPC  over  HTTP 
(Again,  cached  mode  must  be  used.)  If 
users  are  frequently  in  and  out  of  the  office, 
they  can  use  this  profile  in  both  situations, 
provided  they  can  connect  to  the  RPC 
proxy  server  when  inside  the  corporate 
firewall. 

Even  though  that  is  a  lot  of  work,  it’s  also 
generally  less  expensive  than  buying  a  com¬ 
plete  VPN  solution  that  is  only  used  to  pro¬ 


tect  your  email  connections.  If  you’re  using 
a  VPN  for  other  remote  connectivity,  you 
might  not  need  this  feature.  But  if  you’ve 
been  shutting  NetBIOS  and  RPC  off  at  the 
border  to  protect  yourself  from  intrusions, 
this  might  be  a  way  to  once  again  give 
your  remote  users  access  to  a  full  client. 

On  the  move 

The  new  look  and  feel  of  Outlook  Web 
Access  2003  is  very  similar  to  the  full  client. 
Further,  Microsoft  extended  some  of 
Outlook’s  security  features.  Secure  Multi¬ 
purpose  Internet  Mail  Extensions  message 
encryption  is  available  in  OWA,  as  well  as 
the  “external  content  blocking”  features. 
There  is  also  a  timeout  on  the  session  cook¬ 
ie  that  keeps  track  of  the  OWA  connection. 
The  administrator  can  decide  if  the  default 
15  minutes  is  long  enough. 

If  users  connect  to  OWA  with  a  browser 
earlier  than  Internet  Explorer  5.01,  they  are 
given  the  choice  of  connecting  in  basic 
mode,  which  removes  some  of  the  func¬ 
tionality  in  favor  of  better  performance.  For 
additional  performance,  GZip  compression 
can  be  enabled  for  clients  using  Internet 
Explorer  6.0. 

Finally  Microsoft  has  wrapped  Mobile 
Information  Server,  which  had  been  sold 
separately,  into  OWA.  The  new  service, 
dubbed  Outlook  Mobile  Access,  is 
designed  for  thinner  clients,  such  as  cell 
phones  and  Windows  Powered  Mobile 
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How  we  did  it 


We  installed  our  Exchange  2003  Server  on  an  HP  Compaq  ProLiant  DL360 
G3  server,  with  twin  2.4-GHz  Intel  Xeon  processors,  1G  byte  of  RAM  and 
a  36G-byte  RAID5  array,  running  Windows  Server  2003.  A  second,  identi¬ 
cally  configured  DL360  was  used  as  the  proxy  server  for  the  HTTP/RPC  tunnel¬ 
ing  testing.  We  created  a  new  Active  Directory  tree  to  hold  our  new  Exchange 
2003  Server. 

Outlook  2003  was  installed  on  several  Windows  XP  Professional  workstations  of 
various  makes  and  models.  We  mainly  used  Internet  Explorer  6.0,  but  also  tried 
older  versions  to  test  the  basic  modes  of  OWA. 

We  put  Exchange  2003  through  its  paces  by  performing  day-to-day  groupware 
functions,  such  as  appointment  and  task  management,  as  well  as  sending  a 
plethora  of  e-mail.  We  also  had  fun  seeing  what  would  trip  the  "junk  e-mail" 
filters. 


Devices.  While  we  did  not  test  these  fea¬ 
tures,  Outlook  Mobile  Access  extends  the 
Exchange  mailbox  to  these  handheld 
devices  through  synchronization  or  micro¬ 
browser  interfaces. 

Conclusion 

This  is  a  rather  feature-packed  upgrade. 
While  there  might  not  be  enough  to  moti¬ 
vate  non-Exchange  folks  to  switch,  existing 
Exchange  shops  will  certainly  enjoy  this 
upgrade.  Putting  anti-spam  tools  in  the 
hands  of  your  users  might  make  the  invest¬ 
ment  worthwhile,  and  performance  en¬ 
hancements  are  always  welcome. 

Berkley  is  the  manager  of  LAN  Support 
Services  with  the  University  of  Kansas.  He 
can  be  reached  at  berkley@ku.edu. 
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SyslogAnalyzer  2.0 


■  BY  PAUL  FERRILL 

Reading  server  log  files  ranks  up  there 
with  visiting  the  dentist  and  preparing  your 
taxes  by  hand.  But  unless  you  read  those 
log  files,  you  might  miss  something  really 
important  —  such  as  attempted  security 
breaches  or  a  hard  drive  starting  to  fail.  On 
the  other  hand,  you  could  use  the  tool 
SyslogAnalyzer  from  elQnetworks  to  do 
the  sifting  for  you. 

SyslogAnalyzer  examines  system  log 
files  on  Windows  NT,  2000,  XP  and 
Windows  2003,  as  well  as  various  types  of 
Unix  platforms.  NT  platforms  must  have 
Service  Pack  6a  and  the  Windows 
Management  Interface  (WMI)  installed. 
The  basic  license  for  the  software  lets  you 
monitor  up  to  15  unique  servers.  For 
Windows  systems  SyslogAnalyzer  can 
monitor  the  three  log  files  —  system, 
security  and  application  —  depending  on 
,  a  you  configure  it.  Each  of  the  three  log 
keeps  track  of  six  levels  of  events, 
i ;  i'-.i  in.;  success,  error,  warning,  informa¬ 
tive  tiid  audit  success/audit  failure. 

!<>  v  does  not  audit  logon  events 


by  default.  This  feature  must  be  enabled 
by  the  system  administrator  along  with 
other  auditable  events,  such  as  access  to 
specific  files.  Microsoft  knowledge  base 
article  No.  300549  (see  www.nwfusion. 
com,  DocFinder:  7523)  describes  in  detail 
how  to  enable  and  apply  security  audit¬ 
ing  in  Win  2000. 

The  SyslogAnalyzer  console  uses  a  Web 
browser  interface, making  it  accessible  from 
virtually  anywhere.  Critical  events  show  up 
in  the  console  as  red  flashing  stop  signs  to 
get  your  attention.  Graphical  reports  help 
users  quickly  visualize  alert  categories  and 
see  the  highest-volume  offenders.  Report 
format  options  include  Microsoft  Excel  or 
Word,  HTML,  PDF  and  plain  text. 

Customizing  reports  is  a  snap  using  the 
Web-based  report  tool.  New  reports  can  be 
created  from  the  basic,  provided  tem¬ 
plates,  or  you  can  start  from  scratch.  Once 
a  report  has  been  defined,  custom  filtering 
also  can  be  applied  to  present  only  the 
information  of  interest,  if  no  filters  are 
selected,  the  system  defaults  to  the  last  two 
days  of  information. 

Before  monitoring  other  systems  you 


must  add  them  using  the  Hosts  option 
from  the  main  administration  page.  Adding 
a  Windows-based  host  only  requires  that 
you  know  the  administrator  password  for 
the  target  system.  On  Unix  machines  you 
must  perform  several  additional  steps, 
including  editing  a  system  configuration 
file.The  quick  help  guide  provides  most  of 
the  steps,  but  falls  a  little  short  in  leading 
you  through  all  the  necessary  details. 

One  of  the  most  useful  capabilities  of 
SyslogAnalyzer  is  the  alerting  feature. 
Alerts  let  you  specify  which  log  entries  or 
events  should  receive  immediate  atten¬ 
tion.  When  one  of  these  events  is  de¬ 
tected,  an  alert  is  sent  using  e-mail  to  a 
pre-defined  address.You  could  just  as  eas¬ 
ily  send  a  message  to  a  cell  phone  with 
the  same  e-mail  interface. There’s  also  an 
option  to  generate  a  popup  message  and 
audible  alarm  on  the  system  console. 

To  use  the  alert  feature,  the  details  must 
be  configured  for  your  Simple  Mail 
Transfer  Protocol  server,  including  logon 
information  if  it’s  required.  You  might  want 
to  change  other  configuration  deatils  such 
as  the  frequency  of  retrieval  for  log  files. 


SyslogAnalyzer  2. 


elQnetworks 
Wayland,  MA  01778 
www.eiqnetworks.com 


Cost:  $495  for  10  hosts. 

Pros:  Easy-to-use  Web-based  interface 
puts  all  server  log  information  at 
your  disposal.The  flashing  stop 
sign  alert  helps  to  quickly  identify 
trouble. 


Cons:  Documentation  is  missing  some 
information  and  not  written  as 
clearly  as  it  could  be. 


and  how  often  to  delete  events  from  the 
database  (default  is  everything  older  than 
two  days). 

This  product  is  definitely  not  for  the  small 
office  with  only  a  few  servers  to  monitor. 
For  larger  installations  it  could  be  a  useful 
addition  to  the  toolbox  of  a  system  admin¬ 
istrator  responsible  for  several  servers,  espe¬ 
cially  if  they  are  spread  out  geographically 

Ferrill  is  a  freelance  writer  in  Lancaster, 
Calif.  He’s  been  using  and  writing  about 
networks  for  more  than  15  years.  He  can 
be  reached  at  Paul.FerriU@verizon.net. 


The  world’s  fastest  workgroup  color  printer  has  arrived. 
The  Xerox  Phaser®  7300.  You’d  better  hang  on. 
There’s  a  new  way  to  look  at  it. 


Now  color  speeds  through  any  office  at  30  ppm. 

The  Xerox  Phaser®  7300  tabloid  color  printer  beats 
all  speed  records  for  workgroup  color  printing.* 
Powered  by  a  500MHz  PC  processor,  it  delivers  black 
and  white  prints  at  37  ppm,  eliminating  the  need 
for  multiple  printers.  You  get  2400-dpi  color  that’s 
always  sharp  and  brilliant,  with  prints  up  to  12  x  18 


tabloid  bleed.  A  hassle-free  addition  to  any  office,  the 
Phaser  7300  uses  single-pass  technology  to  decrease 
paper  jams,  and  Auto-Install  and  Cent  re  Ware®  Web 
software  for  easy  printer  installation  and  manage¬ 
ment.  To  soar  with  our  reliable,  award-winning  line 
of  network  printers,  call  1-877-362-6507  ext.  1930 
or  visit  xerox.com/officeprinting/bird  1930 


The  Document  Company 

XEROX 


•Based  on  rated  print  speed  of  workgroup  printers  in  the  $1,000-5.000  estimated  retail  price  category 
©  2002  XEROX  CORPORATION  All  rights  reserved.  Xerox*  The  Document  Company*  Phaser?  CentreWare*  and  There's  a  new  way  to  look  at  it'  are  trademarks  of  XEROX  CORPORATION 
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How  emerging  technologies  are 
transforming  key  vertical'industries. 


Real-time  survival 


Chemical  manufacturers  tap  up-to-the-minute  performance  data  to 
improve  processes  in  a  bid  to  stay  competitive. 


I  BY  LAUREN  GIBBONS  PAUL 


Like  every  other  company  in  its  industry  chemical  giant  Atofina  needs 
to  wring  every  last  dollar  and  whiff  of  inefficiency  out  of  its  operations.  A 
few  years  ago,  the  $19.3  billion  company  previously  known  as  Elf 
Atochem,  began  to  implement  a  system  that  collected  data  from  its  man¬ 
ufacturing  plants  for  analysis  by  plant-floor  personnel. 


Today,  that  system  has  evolved  into  a  real-time  perfor¬ 
mance  management  (RTPM)  platform  that  lets  business 
managers  view  valve  pressures,  temperatures,  flows  and 
other  data  generated  from  the  petrochemical-manufac¬ 
ture  process. 

By  broadening  access  to  this  data  beyond  the  plant 
floor,  decision-makers  can  quickly  spot  inefficiencies 
and  fix  them.  Such  enhancements  are  critical  in  the 
challenged  chemical  industry,  which  was  struggling 
even  before  the  recession  hit. 

“You  can  learn  a  whole  lot  by  analyzing  data,  espe¬ 
cially  when  you’re  looking  for  ways  to  make  improve¬ 
ments,  says  Dwight  Stoffel,  principal  plant  electrical 
instrumentation  engineer  for  Atofina’s  plant  in  Calvert 
City  Ky.  Stoffel  was  one  of  the  first  people  at  Atofina  to 
see  the  potential  to  propagate  real-time  performance 
data  throughout  the  company. 

RTPM  systems  collect  timely  data  from  equipment 
and  different  parts  of  a  facility  and  bring  it  together  in 
one  database. “[RTPM]  systems  collect,  aggregate  and 
put  context  around  the  data  to  enable  better  decision¬ 
making,”  says  Leif  Eriksen,  principal  at  consulting  firm 
Industry  Insights. 

Atofina  began  its  RTPM  odyssey  in  1997  by  installing 
the  Plant  Intelligence  application  from  OSI  Software  at 
its  Calvert  City  plant.This  initial  investment  cost  $100,000 
for  hardware,  software  and  installation. The  experiment 
proved  fruitful.  In  2001,  the  first  full  year  that  the  plant 
used  real-time  Plant  Intelligence  data, “we  cut  our  main¬ 
tenance  costs  just  for  parts  by  $363,000,”  Stoffel  says. 

By  last  year,  Stoffel  estimated  Plant  Intelligence  gar¬ 
nered  about  $1.8  million  in  onetime  savings,  mainly  by 
having  the  information  necessary  to  make  better  deci¬ 
sions.  And  the  savings  continue.  “I’m  saving  over 
$100,000  per  year  just  from  automating  the  reports,”  he 
says,  noting  this  was  not  possible  before. 

At  the  Calvert  City  plant,  Plant  Intelligence  collects 
data  from  17,500  points  on  the  industrial  network  and 
fc  i  wards  that  data  through  a  firewall  to  the  WAN.  Since 
hi.'  initial  implementation,  Atofina  has  purchased  80 
*  it  I  :it  ligence  servers  and  is  rolling  them  out  at  hun- 
drt  s  ;  plants  worldwide.  Thanks  to  the  system,  com¬ 
pany  managers  can  analyze  the  data  and  figure  out 
ways  to  improve  processes  and  reduce  costs. 


For  example,  with  safety  and  environmental  issues 
being  paramount,  Atofina  managers  now  pore  over  the 
data  to  identify  areas  where  safety  problems  might  crop 
up,  to  take  action  before  any  breakdowns  occur.  Plant  In¬ 
telligence  also  lets  Atofina’s  plants  share  best  practices. 

Over  the  next  few  years,  being  able  to  make  better 
decisions  like  these  just  might  let  Atofina  thrive  where 
chemical  manufacturers  that  do  not  employ  real-time 
technology  might  stumble  —  or  even  die. 

“Chemical  companies  are  competing  with  suppliers 
from  every  corner  of  the  globe,” Eriksen  says.“It  won’t  get 
any  easier. They  have  to  do  everything  they  possibly  can 
to  increase  productivity’ 

Most  chemical  companies  don’t  need  convincing.  For 
an  industry  that  spends  only  2%  of  revenue  on  IT  annu¬ 
ally,  firms  such  as  Atofina,  Dow  Corning,  Eastman 
Chemical,  Equistar,  Nippon  Chemical, Quaker  Chemical 
and  others  have  elected  to  spend  their  precious  IT  dol¬ 
lars  on  RTPM.  In  addition  to  OSI,  Aspen  Technology  and 
Lighthammer  Software  Development  are  major  RTPM 
players  in  this  market. 

The  RTPM  data-collection  software  application  is 
installed  on  a  dedicated  server  that  usually  resides  on  the 
company’s  industrial  network,  which  controls  the  manu¬ 
facturing  process.  Information  is  transferred  through  a 
firewall  to  the  WAN.  Because  the  industrial  network  is  the 
heart  of  the  operations,  it  must  be  protected.  “The  data 
flows  only  from  the  industrial  network  out  to  the  WAN, 
not  vice  versa.  A  complex  firewall  separates  the  two 
sides,” says  Michelle  Barlow,  manufacturing  systems  man¬ 
ager  for  Atofina,  in  Axis,  Ala. 

Increased  network  overhead  is  another  concern  for 
Dow  Corning,  a  $2.6  billion  company  that  uses  Light- 
hammer  Illuminator. The  company  also  plans  to  distrib¬ 
ute  Lighthammer  servers  to  its  plants  around  the  world 
to  empower  anyone  involved  in  the  supply  chain  to  view 
and  analyze  the  company’s  performance  data. 

However,  Kirk  Royster,  IT  architecture  manager  for  Dow 
Corning  in  Midland,  Mich., says  the  system  will  not  have  a 
significant  effect  on  network  performance  because 
Lighthammer  can  cache  servers.  “This  will  reduce  the 
impact  on  network  bandwidth  over  the  WAN.  There’s  no 
need  to  query  the  source  database  every  time  if  the  infor¬ 
mation  has  not  been  updated,"  he  says. 


Given  that  chemical  companies  are  so  careful  with  IT 
spending,  it  is  fortunate  that  RTPM  systems  are  not 
ruinously  expensive.  Costs  vary  widely,  but  a  company 
with  $5  billion  to  $10  billion  in  revenue  and  approxi¬ 
mately  50  plants  can  expect  to  spend  about  $5  million 
to  $10  million  on  RTPM,  Eriksen  says. 

“If  you  have  no  real-time  technology  in  place  today, 
just  putting  in  a  system  will  result  in  substantial  ROI.  It 
will  pay  for  itself  in  less  than  a  year”  Eriksen  says.  Dow 
Corning  expects  business  results  and  productivity  gains 
from  its  first  RTPM  project  to  pay  for  the  system  for  the 
whole  company.  Royster  declined  to  give  details,  but 
says  costs  for  the  Lighthammer  application  represent  a 


I  CHEMICAL  INDUSTRY:  AT  A  GLANCE 

f  Overall  investment:  In  2002,  chemical  companies 
:  spent  $9.45  billion  on  IT,  down  from  $9.67  billion  in 
2001,  according  to  the  American  Chemistry  Council. 

f  IT  spending:The  chemical  industry  spends  an 
average  of  2%  of  annual  revenues  on  IT,  according 
to  AMR  Research. This  year  and  next,  chemical 
firms  will  earmark  an  average  of  19%  of  their  IT 
budgets  for  software  applications  such  as  RTPM. 

<  U.S.  revenue:The  American  Chemistry  Council 
estimates  that  U.S.  chemical  companies  will  total 
$450  billion  in  revenue  this  year. 

*  Innovation:  The  chemical  industry  has  helped 
develop  more  than  70,000  products.  Chemical 
industry  scientists  and  researchers  account  for 
one  in  seven  patents  filed  in  the  U.S.  every  year, 
according  to  the  American  Chemistry  Council. 


fraction  of  the  IT  budget. 

Companies  can  further  reduce  costs  by  having  a  ven¬ 
dor  such  as  Industrial  Evolution  host  the  application  for 
them.  Quaker  Chemical,  a  $300  million  chemical  pro¬ 
ducer,  pays  Industrial  Evolution  about  $3,000  per  month 
to  receive  real-time  data  from  25  points.“lt’s  cost-effective, 
and  we  don’t  want  to  devote  salaries  and  people  to  real¬ 
time  monitoring,” says  Joe  Berquist,  product  manager  for 
Quaker  in  Conshohocken,  Pa. 

Remaining  competitive  in  the  chemical  industry 
today  requires  the  ability  to  make  the  continual 
process  improvements  afforded  by  RTPM.“No  chemical 
company  will  continue  to  exist  five  years  from  now  if 
they  don’t  have  some  form  of  real-time  infrastructure  to 
monitor  and  manage  their  operations,”  Eriksen  says. 

Paul  is  a  freelance  writer  in  Wabari,  Mass.  She  can  be 
reached  at  lauren.paul@comcast.net. 


Riley's  band  took  second  place 
in  a  battle  of  the  bands  contest. 
They  won  some  hair  gel 
and  a  Neil  Diamond  album. 
Keep  on  rockin',  Riley. 


Nothing  beats  number  one. 


RETINA®  The  #1  Rated  Network  Security  Scanner 

Superior  Vulnerability  Assessment  &  Remediation 

. . . . . . . . 

Would  you  trust  the  security  of  your  network  to  anyone  but  the  industry  leader?  Introducing 

Retina,  the  industry's  #1  rated  vulnerability  assessment  solution  from  eEye  Digital  Security. 

Retina  uses  non-intrusive  tests  to  assess  your  network,  accurately  identify  weakness  and 
provide  comprehensive  detail  to  enable  complete  remediation.  Take  control  of  your  network 
and  let  Retina  simplify  your  risk-reduction  process.  Because  nothing  beats  number  one. 

<e> 

eEye  Digital  Security 

Download  RETINA  Trial  Version  &  Receive  a  FREE  COFFEE  MUG* 

Vulnerability  is  over. 

Visit:  www.eeye.com/DemoMug 
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■  CAREER  DEVELOPMENT 

■  PROJECT  MANAGEMENT 

■  BUSINESS  JUSTIFICATION 


Language  lessons 

Communication  is  the  key  to  CIOs  forging  better  relationships  with  CFOs  to  win  consensus. 


■  BY  CHUCK  TATHAM 

CIOs  and  CFOs  often  act  as  though  they 
are  partners  in  a  strained  marriage.  Both 
parties  have  seen  their  roles  change  within 
the  organization  over  the  past  decade. 
Previously,  the  CFO  had  to  approve  all  IT 
purchasing  decisions,  while  IT  executives 
were  charged  with  making  technology  rec¬ 
ommendations  and  implementations. 
Then  came  the  free-spending  technology 
boom  that  elevated  the  status  of  CIOs.  This 
position  was  considered  essential  for  any 
business,  and  the  CIOs  recommendations 
were  viewed  as  mission-critical. 

But  today’s  downturn  has  made  cost-cutting  king,  and 
many  businesses  have  become  disillusioned  by  empty 
ROl  promises  IT  vendors  made.  Every  IT  investment  is 
heavily  scrutinized,  leading  many  CFOs  to  once  again 
seize  control  of  IT  budgets  and  get  more  involved  in  the 
IT  decision-making  process. 

With  more  CFOs  becoming  technology-sawy  and  play¬ 
ing  an  increasing  role  in  technology-spending  decisions, 
CIOs  and  CFOs  must  learn  to  play  nicely  with  each  other. 
The  thorn  in  the  relationship’s  side  lies  in  that  most  CFOs 
see  the  hefty  dent  IT  expenditures  make  in  the  expense 
column, and  yet  they  don’t  have  a  clear  understanding  as 
to  how  these  investments  contribute  to  corporate  earn¬ 
ings.  Few  technology  chiefs  succinctly  can  demonstrate 
and  justify  the  value  and  return  of  their  IT  expenditures, 
and  worse,  many  have  not  yet  adopted  an  IT  governance 
model  that  lets  them  align  IT  with  business  needs. 

Fbor  communication  causes  many  of  the  problems 
CTOs  and  CIOs  have.  CFOs  often  think  CIOs  don’t  have  a 
grasp  on  the  company’s  overall  strategic  direction,  while 
CIOs  often  feel  isolated  from  corporate  planning.  For  the 
marriage  to  work,  CIOs  must  learn  how  to  become  strate¬ 
gic  advisers  who  engage  senior  management  and  gain 
buv-in  to  technology  projects  while  explaining  the  busi¬ 
ness  impact  in  terms  a  financial  leader  can  understand. 

CIOs  should  think  of  their  title  as  an  acronym  for 
'Communicate  Information  Often.”  What  follows  are  sev¬ 
eral  tactics  CIOs  and  other  IT  leaders  should  try  for 
im;  ■  roving  relations  with  the  CFO  and  other  executives: 

•  Be  e  ne  more  comfortable  with  financial  lingo.  Just 
as  CFOs  must  now  have  a  basic  knowledge  of  technol¬ 
ogy  the  CIO  must  be  able  to  communicate  in  terms  the 
CFO  understands. such  as  total  cost  of  ownership  or  ROI. 


Armed  with  hard  data,  CIOs  will  have  an  easier  time  sell¬ 
ing  projects  to  executive  management. 

•  Qualify  and  quantify  IT  spending.  The  IT  department 
cannot  become  accountable  until  it  accurately  can 
demonstrate  how  it  is  spending  its  time  and  budget  dol¬ 
lars.  To  do  this,  CIOs  are  looking  for  technology  invest¬ 
ments  that  provide  a  holistic  view  into  their  IT  operation 
to  enable  effective  project  portfolio  management. 

•  Generate  value.  It’s  not  about  implementing  the  lat¬ 
est  technology,  but  linking  strategies  to  corporate  goals 
by  working  and  communicating  directly  with  business 
managers. 

For  example,  if  a  company  improves  profitability  because 
of  a  business  process  automation  system,  the  CIO  should 
ensure  that  business  managers  comprehend  the  effect  the 
technology  investment  had  on  this  milestone.  After  clearly 
demonstrating  the  value  IT  investments  have  on  corporate 
objectives,  it  will  become  easier  to  obtain  buy-in  on  other 
technology  expenditures. 

•  Consider  chargeback.  Think  about  adopting  a 
chargeback  model  that  includes  billing  staff  time  back 
to  the  appropriate  business  units.  By  running  your  IT 
department  like  a  consulting  practice,  a  CIO  can 
ensure  that  the  business  units  are  aligned  with  tech¬ 
nology  spending.  The  result  is  better  alignment  of  IT 
with  overall  corporate  strategy. 


•  Partner  across  the  company.  Move  toward  coalition 
building.  CIOs  must  be  able  to  express  persuasively  and 
intelligently  the  technology  agenda  to  peers,  the  press, 
industry  executives  and  employees. 

For  example,  if  the  CIO  is  lobbying  for  a  complete  over¬ 
haul  of  a  CRM  system,  it  only  makes  sense  to  work  with 
the  head  of  customer  relations  to  produce  a  strategic  pro¬ 
posal  with  supporting  evidence  —  including  some  sort  of 
ROl,  such  as  productivity  improvements  and  decreased 
customer  turnover. 

Making  it  work 

When  CIOs  and  CFOs  aren’t  able  to  forge  harmony,  the 
losers  in  the  dispute  are  quite  often  employers  them¬ 
selves.  But  if  the  communication  breaks  down  and  the 
two  parties  don’t  work  in  tandem  —  or  in  some  cases 
work  against  each  other  —  an  organization  automati¬ 
cally  is  put  at  a  disadvantage. 

CIOs  who  rise  to  the  occasion  by  developing  strong  rela¬ 
tionships  with  CFOs  will  reap  significant  rewards  —  and 
win  a  seat  at  the  strategy  table. 

Tatham  is  vice  president  of  marketing  and  business 
development  for  Changepoint,  a  Toronto  provider  of  busi¬ 
ness  process  automation  software.  He  can  be  reached  at 
c  tat ham  @changepoint.  com. 


Console  Management 


Power 


Command  Your  Network 
With  Cyclades 


Selecting  the  right  components  for  your 
network  is  often  a  challenging  decision. 

With  our  AlterPath"  PM8,  you  can  remotely 
re-boot  your  system  with  just  a  few  mouse  clicks. 

By  integrating  the  AlterPath"  PM8  with  our 
award-winning  AlterPath'"  ACS,  you  combine 
power  and  console  management.  Now  you  can 
command  all  your  infostructure  with  secure  authentication 
and  bulletproof  encryption  as  demanded  by  todays' 
mission-critical  applications  all  in  one  single  session  -  anytime,  anywhere. 


AlterPath"  ACS 


AlterPath"  PM8 


Power 


Power 

e 


Console  and  power  control  from  one  session, 
no  need  to  memorize  ports  and  addresses 

SSH  v2,  strong  authentication,  encryption  and 
IP  filtering  on  both  power  and  console  access 

Daisy  chain  power  distribution  units  to  control 
any  number  of  devices  from  a  single  serial  port 
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im 

Control 


Monitoring 


Jotsy 

Chaining 


"Best  Hardware  for 
Linux  since  1995' 


www.cyclades.com/nw 

1 .888. cyclades 
sales@cyclades.com 


cyclades 


verywhe 
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S  Secure  Shell  (SSHv2)  Encryption 
B  Simultaneous  SSH  or  Telnet 
»  Non-Connect  Port  Buffering 
8£  SYSLOG  Reporting 

■  SNMP  Capability 

■  Any-to-Any  Port  Switching 
H  IP  Security  Features 

■  10/100  Base-T  Ethernet  Port 

■  Port-specific  Password  Protection 
B  Data  Rate  Conversion 
B  11 5/230 VAC  or  -48VDC  Models 

The  SCM-16  Secure  Console  Management  Switch  provides  in-band  and 
out-of-band  access  to  RS232  console  ports  and  maintenance  ports  on  UNIX 
servers,  routers  and  any  other  network  elements  which  have  a  serial  console 
or  craft  port.  System  administrators  can  access  serial  maintenance  ports 
over  the  network  via  SSH  connections  and  simple  menu-driven  commands, 
or  through  a  discrete  TCP  port  connection  mapped  directly  to  one  of  the 
SCM-16  serial  outputs. 


Visit  website  for  complete  NetReach™  product  line. 


(800)  854-7226  •  www.wti.com 

5  Sterling  •  Irvine  •  California  92618-2517 
(949)  586-9950  •  Fax:  (949)  583-9514 


western  telematic  incorporated 


Experience  Counts.  Since  1 994  GTA 
has  been  building  solid,  dependable 
firewall  systems.  For  the  past  8  years 
our  line  of  firewall  products  have  met 
the  demands  of  small  to  medium 
sized  businesses  worldwide.  To  learn 
more  about  our  family  of  firewalls  visit 
our  website  or  contact  a  GTA  channel 
partner. 


Ultf-fil  lliK 


I 

UltraLink™ 
REMOTE  KVM  ACCESS  OVER  IP 

Connect  to  remote  computer  over  Ethernet  or  dial-up 
Single,  dual,  quad  models 

Local  KVM  port  to  access  computers  at  UltraLink  unit 

Modem  port  with  dial-back  security 

Up  to  1280x1024  resolution,  supports  all  platforms 

to  install,  give  it  an  IP  address  and  run  the 
remote  client,  no  licensing  required 

Scaling  of  computer  image  reduces  amount  of  data 
sent  and  permits  fast  screen  updates  over  slow  links 

Quad  screen  mode  allows  you  to  see  four  servers 
from  one  screen 

SSL  security  and  passwords  prevents  unauthorized 
access 


CrystalView™  Mini 
CAT 5  KVM  EXTENDER 

♦  Extends  KVM  station  up  to  1 50 
feet  away 

♦  optional  serial/audio 

♦  Single  or  dual  (dual  supports 
second  KVM  station) 

♦  Up  to  1280x1024  resolution 


CrystalView™ 

CAT 5  KVM  EXTENDER 

♦  Extends  your  KVM  station  up  to 
1000'  from  your  computer 

♦  Supports  PC,  Sun,  or  USB, 
optional  Audio/Serial 

♦  Single  or  dual  (dual  supports 
second  KVM  station) 

♦  Up  to  1 600  xl  200  resolution 

♦  Available  as  standalone,  rack 
mounted,  or  high  density  chassis 


Rose  Electronics  •  10707  Stancliff  Road  •  Houston,  Texas  77099 


CrystalView™  Pro 

DIGITAL  KVM  EXTENDER 

OVER  FIBER  OR  CAT  5 

♦  Extends  KVM  signals  up  to  33,000 
feet  away 

♦  Uses  only  two  fibers  or  single  Cat  5 

♦  Supports  D VI/VGA,  PC,  Sun,  USB, 
optional  Audio/Serial 

♦  Single  or  dual  (dual  supports 
second  KVM  station) 

♦  Up  to  1 600x1200  resolution 


CrystalView™  Rack 
CAT 5  KVM  EXTENDER 

♦  Extends  the  distance  from  6  or  1 2 
PC's  up  to  1 000  feet  away 

♦  optional  serial/audio 


Single  or  dual  (dual  supports 
second  KVM  station) 

Up  to  1600x1200  resolution 
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ELECTRONICS 


WWW.ROSE.COM 


USA  toll  free 
ROSE  US 
ROSE  Europe 
ROSE  Asia 


800  333  9343 
281  933  7673 
+44(0)  1264  850574 
+65  6324  2322 


There  Is  A  Better  Way  To  Troubleshoot  &  Manage  Your  Network 


Observer 
* 995 


Expert 
Observer 
* 2895 


Observer 
Suite 
* 3995 


Observer® — Quickly  identifies  network 
trouble  spots  and  costs  thousands  less  than 
expensive  hardware-based  analyzers. 
Observer  provides  metrics,  capture,  and 
trending  for  both  shared  and  switched 
environments. 

•  Full  packet  capture  and  decode  for  over 
500  protocols,  including  TCP/IP  (v4  &  v6), 
NetBIOS/NetBEUI,  XolP,  SNA,  SQL,  IPX/SPX, 
Appletalk  and  many,  many  more! 

•  Switched  mode  sees  all  ports  on  a  switch 
gathering  statistics  from  an  entire  switch  or 
capture/statistics  from  any  port(s) 

•  Long-term  network  trending  collects 
statistical  data  for  days,  weeks,  months, 
even  years 

•  Real-time  statistics  include  Top  Talkers, 
Bandwidth,  Protocol  Statistics,  and 
Efficiency  History 

•  Ethernet  (10/100/Gigabit),  Token  Ring, 
FDDI,  and  Wireless  802. 1 1 — no  need  to 
purchase  separate  tools 


•  Windows ®  98/Me/NT/2000/XP  compatible 

•  Over  4,000  frame  types  recognized 

Expert  Observer — Identifies  problems  and 
provides  Expert  information  in  plain  English. 

Includes  all  of  the  features  of  Observer  plus 
real-time  and  post-capture  expert  event 
identification  and  analysis — new  SQL  and 
Frame  Relay  experts  add  to  the  many  other 
protocols  covered,  time  synchronization 
technology,  and  modeling  of  network  traffic. 

Observer  Suite — The  ultimate  tool  for 
the  most  demanding  power  user. 

Provides  a  full  complement  of  tools  that 
includes  all  of  the  features  of  Expert 
Observer  plus  SNMP  management,  RMON 
console/Probe  and  Web  reporting.  Includes 
one  remote  Probe. 

If  you  have  any  network  problems,  find 
out  the  cause  with  Observer,  Expert 
Observer,  or  Observer  Suite. 


Call  800-526-7919  or  visit  us  online  for  a  full-featured  evaluation: 

www.NETWORKlNSTRUMENTS.com 

US  (952)  932-9899  •  Fax  (952)  932-9545  •  UK  &  Europe  +44  (0)  1959  569880  •  Fax  +44  (0)  1959  569881 


NETWORK 

INSTRUMENTS 


©2002  Network  Instruments,  LLC.  Observer,  “Network  Instruments”  and  the  “N  with  a  dot"  logo  are  registered  trademarks  of  Network  Instruments,  LLC. 
All  other  trademarks  are  property  of  their  respective  owners. 
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Telnet  Management 


RS-232 

Serial  Management 


SERVER 


Link  Port 
(daisy  chains  to) 

Expansion  Module 


SERVER 
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Intrusion  Prevention 
for  Microsoft  Web  Servers 


SecurellS™  Web  Server  Protection 


•  Requires  No  Signature  Database  Updates 

•  Simple,  Powerful  GUI 

•  Central  Policy  Management 


•  Shields  Against  All  Classes  of  Attack 

•  Protects  Without  Disabling  IIS  Functionality 

•  RFC  Compliancy  Checking 
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HTTP  RFC  Violation  :  RFC  Violation 


EvtBt  ID:  3II3-FLT-64 
Websita:  Beb  IS  1 

Refeiance  ID:  20030327649207 
Agent:  SecurellS  2.0.3 
Remote  IP:  192.168. 1. 16 

Source  Data:  HTTP/  1 . 0 
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Download  a  FREE  Whitepaper  and  FREE  Trial  of  SecurellS: 
www.eEye.com/FreeSecurellS  or  call  866.282.8276 


SecurellS  delivers  proven  security  for  blocking  known  and 

<G> 

unknown  attacks  from  penetrating  Microsoft  IIS  servers. 

eEye*  Digital  Security 

Avoid  Downtime 

Plan  ahead  and  protect  your  IT  operations 
from  heat  crippling  downtime 


Thousands  of  COOLITs  are 
currently  cooling  data/LAN 
rooms  around  the  clock. 


ttf-'N 


AirPac 


COOLIT  2000  Series 

Plug  and  cool  -115  V. 


Portable  -  Compact  -  Self-Contained 


Online  ordering 
next  day  shipping 


ADAPT 

800-243-COOL 


www.CoolestSppt.com 


NEW 


WRCA.NET 

<*dC*E2>=> 


USED 


50%-90%  Discounts 


Cisco  Livingston  Ascend  Lucent 
3Com  US  Robotics  Kentrox 
Adtran  BayNetworks  Xyplex 
Packeteer  Computone  Patton 
Extreme  Networks 

Modems  /  DSU  /  Muxes 

IBM  UDS  Codex  Hayes  GDC 
Micom  Microcom  Paradyne 
ATT  MultiTech  Penril 
Racal  Telebit  Zoom 


BUY  AND  SELL 

800-699-9722 
www.wrca.net 
AS5x  VOIP /EXS  2000 
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WWW.RECURRENT.CDM  INFO(a)RECURRENT.CDM 


COB/\^p 

r  ,o:;yA 

Q(cv  * 

▲  °o 

■■81  ^ 

rem 

m  • 

1 

UN  i 

BALT 

bu 

iaI| 

m 

m.m 

8  n  rfiKI 

Systems/Features/Memory 


Also  Available:  weUfleet,  Bay,  Fore, 
Xylogics,  Livingston,  &  Ascend 

In  Stock  •  Fast  Delivery  •  No  Expedite  Charges 


COMSTAR,  INC. 

The  HI  Network  Remarketer 

952*835*5502 

Fax  952»8S5*1927  E-Mail:sales@comstarinc.com 


Advertise  in  the  Marketplace 
and  watch  your  sales  come 
»  pouring  in! 

Call  Direct  Response  Advertising 
1-800-622-1108 


Certified-As-New 


One -Year  Warranty 


►  Largest  warehouse  of  used  Cisco 

►  Highest  quality  and  lowest  prices 

►  Over  5000  satisfied  customers 

Call  or  email  for  a  fast  quote. 


800.439.8558 


digitaiwnrehous6.com 

4b 


For  more  Information 
on  advertising  In 
^etworfc  Worthy  MarftetMace 
contact;  Eriku  Gotale? 
800-622-1108  ext«  6¥65, 
e^ofcale©nww^om 
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IT  EDUCATION,  TRAINING  8c  CERTIFICATION 


Advertising  Supplement 


ST  Careers:  Educators  Push  to  Stay  Ahead 
of  Technology  Requirements 
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Teiecontimin 
ications 


hether  enrolling  this  fall 
in  degree  or  certificate 
programs  at  Carnegie  Mellon 
at  Southeast  Missouri  State 
University,  IT  professionals  will  have 
more  diversity  in  course  work 
and  in  specialization  than 
'  ever  before. 


■Software* 
Engineering 


Most  every  regional  university 
across  the  nation  offers  some  type 
of  information  technology  or 
computer  science  degree  or 
concentration.  For  students  at  the 
University  of  Alabama-Huntsville, 
the  focus  is  on  small  classes  taught 
by  tenured  faculty.  At  Southeast 
Missouri  State,  students  are  able  to 
focus  on  computing  for  industrial 
applications  but  also  for  specializations  in 
telecommunications  and  utilities.  George 
Mason  University  in  Washington,  D.C. 
is  pushing  to  meet  the  requirements 
for  graduate  and  undergraduate 
students  working  in  the  defense  and 
security  arenas. 


According  to  Dr.  Peter  Raad, 
director  of  the  Hart  eCenter  and 
managing  director  of  The  Guildhall 
at  Southern  Methodist  University, 


academia  tends  to  respond  to  educational  needs  rather 
than  lead.  The  establishment  of  SMU's  digital  gaming 
certification  program  breaks  that  mold.  "We  believe  that 
the  technologies  of  digital  game  development  are 
the  fundamentals  of  the  first  new  academic  discipline 
of  the  21  st  century,"  says  Raad.  "To  some  extent  it's  about 
jobs  -  there  are  very  good  jobs  (projected  at  5,000  a  year) 
waiting  for  people  with  the  education  that  The 
Guildhall  provides." 

For  the  highly  rated  programs,  such  as  U.S.  News 
&  World  Report's  #1  undergraduate  program  at 
Rose-Hulman  Institute  of  Technology  (2004),  there 
have  been  more  significant  changes  designed  to  meet 
today's  business  requirements  but  also  to  preserve  the 
United  States'  leadership  in  computing  and  software. 
Cary  Laxer,  professor  and  head  of  the  computer  science 
and  software  engineering  degree  programs,  explains 
that  by  adding  the  software  engineering  degree 
program  this  year,  Rose-Hulman  is.  able  to  return 
the  computer  science  degree  to  a  more  theoretical 
emphasis.  This  kind  of  approach,  he  believes,  is 
critical  for  the  United  States  to  remain  at  the  forefront 
of  discovery  and  innovation  in  computing. 

"The  software  engineering  degree  is  something 
companies  are  looking  for,"  Laxer  says.  "Nearly 
every  engineering  discipline  involves  writing  code 
these  days,  but  software  engineering  is  for  those 
individuals  who  will  be  writing  hundreds  of  thousands 
of  lines  of  code  for  a  project." 


Another  distinction  for  Rose-Hulman  is  that  the  school 
recruits  for  a  freshman  class  -  not  for  specific  majors  or 
disciplines.  It's  the  same  approach  as  is  used  for  another 
U.S.  News  &  World  Report  ranking  school,  Harvey  Mudd 
College  in  Los  Angeles.  "We  find  that  30  to  40%  of  the 
freshmen  will  change  their  majors  while  they're  here, 
so  we  are  selling  all  of  our  programs,"  Laxer  says. 

The  school's  reputation  is  based  on  more  than 
the  technical  side,  too.  Laxer  reports  that  the  largest 
department  at  Rose-Hulman  is  humanities;  students 
are  required  to  take  three  years  of  humanities  credits 
just  as  they  were  25  years  ago.  "Probably  one  of  the 
biggest  changes  we've  found  for  students  in  looking 
for  jobs  is  that  companies  have  more  distinct 
personalities  -  that  fit  between  company  and  student 
is  more  important  than  ever." 


For  more  information  about  IT  Careers  advertising, 
please  contact: 

Nancy  Percival 

Vice  President,  Recruitment  Advertising 

800.762.2977 

500  Old  Connecticut  Path 

Framingham,  MA  01701 

Produced  by  Carole  R.  Hedden 


Northeastern 


Learn  Cutting-Edge 
IT  Skills  Online 

10  Certificate  Programs 
50+  Courses 

Northeastern  University  offers  a 
wide  variety  of  Web-delivered 
technology  programs  that  can 
help  keep  you  ahead  in  today's 
competitive  marketplace. 

Whether  you  need  degree 
credits  or  advanced  professional 
development  options,  we  have  a 
course  for  you. 

CLASSES  START 
SEPTEMBER  22. 

For  more  information  call 
877.375.6865  Ext.  608 
or  TTY  617.373.2825 
www.ace.neu.edu/nuol608 


NUOL  Programs  in: 

•  Computer  Programming 

•  Database  Design  & 
Administration 

•  UNIX  and  Linux  for  Business 

•  Information  Networks 

•  Internet/Web  Technologies 

•  Java  Developer 

•  Web  Services  for  the  NET 
Framework 

•  Web  Design 


Higher  Learning.  Richer  Experience 


Need  an  upgrade? 
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Software  Programmer:  Analyze 
&  design  core  business  modules 
using  PowerBuilder,  Visual 
Basic,  SQL  Server,  XML;  write 
stored  procedures;  write  scripts 
&  report  templates  for 
CathSource,  HeartSource.  & 
OrthoSource  applications;  cre¬ 
ate  data  extracts  &  develop  doc¬ 
umentation  for  user’s  guide 
Req,  Bachelor's  or  foreign 
degree  equiv  in  CS,  IT  or  related 
plus  2  yrs  work  exp  in  job  offered 
or  in  related  occupation  as 
Programmer,  Consultant  or  any 
suitable  combo  of  edu..  training, 
and/or  work  exp.  Send  resume 
to  Goodroe  Healthcare 
Solutions.  Inc.  100  Crescent 
Centre  Pkwy,  Ste  720,  Tucker, 
GA  30084  Ref  JB 


Software  Engineer,  Sr. 
(Biomedical  Research). 
Job  site:  Valencia,  CA. 
Send  resume  to  Alfred 
E.  Mann  Foundation  for 
Scientific  Research, 
attn:  Karen  Morris, 
28460  Avenue  Stanford, 
Suite  215,  Valencia,  CA 
91355. 


PROGRAMMER/ANALYST 

Plan,  develop,  test  &  docu¬ 
ment  computer  software 
using  XML,  JSP,  EJB, 
JDBC,  XSL,  Java  Servlets, 
WebLogic  and  WebSphere 
with  ORACLE  &  DB2  data¬ 
bases  in  Windows  and  UNIX 
environments.  Bachelor's 
degree  &  2  yrs'  exp  req'd. 
Send  resume  to:  HR  Dept. 
Fulcrum  Logic,  Inc. 
Short  Hills  Plaza 
636  Morris  Tpke,  Ste  2J 
Short  Hills,  NJ  07078 


Software  Engineer  req.  by  Soft. 
Dev  &  Conlt.  Comp.  Duties. 
Design  Develop  Install,  cus¬ 
tomize  &  maintain  Solaris  & 
Windows  Server.  Installing  and 
supporting  Veritas  &  Sun 
Cluster,  Net  Email  and  Directory 
Server.  Support  Highend 
servers.  Job  to  be  performed  at 
Willowgrove.  PA,  &  various 
unanticipated  client  sites 
throughout  the  U.S,  as 
assigned.  Req.  A  Masters 
degree  in  Eletronics,  or  Comp 
Sci,  &  1  yr  exp.  in  relevant  field 
or  related  occup.  40  hrs/wk, 
9AM-5PM,  Mon-Fri.  Contact, 
President,  SMTK  @  Willow 
grove,  SPCE#  3042,  2500 
Mooreland  Avenue,  Wilowgrove, 
PA  19090. 


SOFTWARE  ANALYST: 
Columbus  OH  to  develop 
controller  software  for 
TS/GPS  instruments.  Must 
have  exp.  w/Visual  C++, 
SQL  server,  GUI  develop, 
for  CE  devices;  survey  & 
good  understanding  of  sur¬ 
vey  controller  preferred.  A 
BS  degree  or  eqv.,  3-mos- 
exp  required.  Resumes  to: 
1347  Worthington  Woods 
Blvd.,  Columbus,  OH 
43085.  No  calls. 


ASIC  Design  Eng  -  Develop 
audio  &  video  multimedia  tech¬ 
nologies  for  home  networks. 
Design  H/W  architecture  for 
FPGA  &  ASIC  using  Verilog  & 
VHDL.  Synthesize  H/W  design 
using  Synopsys  &  Synpicity 
tools.  Responsible  for  test 
bench  &  board  level  verification. 
Develop  IP  cores  for  multimedia 
LSIs  &  ASICs  &  write  device  dri¬ 
vers  using  SCSI  &  FCIP  proto¬ 
cols.  Bach’s  deg  in  Comp  Sci, 
Physics  or  Elec  Engrg  reqd  +  2 
yrs  exp  in  job  offered.  Snd 
resume  to  Panasonic 
Semiconductor,  550  South 
Winchester  Blvd,  Ste  300,  San 
Jose,  CA  95128,  Attn:  Todd 
Windley,  SP. 


THE  WORLD’S 
BEST  IT  TOOL  IS  IN 
YOUR  HANDS. 

THE  WORLD’S 
BEST  IT  TALENT  IS 
AT 

OUR  SITE. 


www.itcareers.com 


Oracles  DBA  to  support,  main¬ 
tain,  monitor  performance,  trou¬ 
bleshoot  Oracle  Applications 
and  databases  24x7  for  the  tele¬ 
com.  industry  using  Oracle  tools 
like  OEM,  Statspack,  Tkprof, 
BMC  products,  SQL  navigator  & 
backtrack.  Support/  perfor¬ 
mance  tune  CRM  Siebel  appln. 
queries  on  Oracle  databases 
and  troubleshoot  interface 
issues.  Maintain  application 
code  in  PL/SQL  &  Shell  Scripts. 
Use  Siebel  tools/  SQL  navigator 
for  development  and  version 
control  tools  (Harvest)  to  main¬ 
tain  code.  Plan  capacity,  per¬ 
form  database  backup  using 
SQL  Backtrack  in  Vertias  envi¬ 
ronment,  develop  data  recovery, 
migration  and  sync  procs. 
Develop  database  and  appln. 
upgrade  strategies.  Implement 
security  stds.  /  practices  for 
database  security  using  Sudo. 
MS  in  Comp.  Applications  or 
equivalent  +  2  yrs.  exp.  In  job 
duties.  Comp,  salary.  Apply  to 
Netserv  6580  Jimmy  Carter 
Boulevard,  Norcross,  GA  30071 
with  proof  of  perm,  work  auth. 


Software  Engineers  to  analyze, 
design,  develop,  implement 
appls  using  Java,  C++/C,  Perl, 
Shell  Script,  JDBC,  VB,  Pro*C, 
Oracle,  Dev  2000,  SQL  Server 
on  UNIX/Windows  platforms; 
perform  unit/integration  testing, 
performance  tuning  and  query 
optimization;  interact  with  clients 
to  ascertain  functional/tech, 
reqs.;  provide  customer  support, 
feedback;  debug  and  trou¬ 
bleshoot;  train  team  members/ 
end  users.  Require:  M.S.  or  for¬ 
eign  equiv.  in  CS/Engg.(any 
branch)  with  1  year  exp.  in  IT. 
Travel  involved.  High  salary.  F/T. 
Resume:  HR,  Compsoft 

Technology  Solutions  Group, 
Inc.,  11  N  Roselle  Rd., 
Schaumburg,  IL  60194. 


Horizon  Companies,  Inc.  is  look¬ 
ing  for  system  analyst,  IT  profes¬ 
sionals.  Minimum  requirement  is 
BS  plus  IT  experience.  Skills  in 
VB  5.0,  Forms  4.5,  SAP, 
PeopleSoft,  Oracle  &  Oracle 
Financials,  AP,  AR,  GL  pre¬ 
ferred.  Apply  at  2025  Lincoln 
Hwy,  Ste.  322,  Edison,  NJ 
08817  EOE 

Infomerica  is  looking  for  sys¬ 
tem/programmer  analysts,  soft¬ 
ware/project  engineers  &  com¬ 
puter  consultants  working  at  dif¬ 
ferent  sites  (travel  required). 
Candidates  must  have  BS  with 
1-year  exp.  in  IT  fields.  Skills  of 
Oracle,  Informix,  Java  preferred. 
Send  resumes  to: 
info@infomericainc.com 


IP  ARCHITECT,  SR.  - 
Hauppauge,  NY.  Provide 
LAN/WAN  tech  arch  for 
Satellite/Comm  Co.  Dsgn 
data  ntwrks,  troubleshoot, 
update  &  provide  tech  sup¬ 
port.  Must  have  Master’s  Deg. 
or  equiv  in  Optoelectronic  Sys 
&  2  yrs  exp  in  job  offd  or  2  yrs 
exp  as  IT  Speclst/Conslt. 
Must  be  exp'd  in  VP  Ntwrks, 
Frame  Relay,  Layer-3  Switch¬ 
ing  &  Must  be  CISCO  Cert'd- 
CCCP  &  CCNP.  Send 
resumes  to:  Vice  Pres.,  H.R. 
Netsat  Express,  Inc.,  45  Oser 
Avenue,  Hauppauge,  NY 
11788. 
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Network  Service  Solution* 

NET2S  is  a  leading  International  e- 
business,  information  technology, 
and  communication  infrastructure 
consulting  firm.  We  are  currently 
seeking  for  the  following  positions: 

•  Sr.  Tibco  (RV,  Hawk,  Ingetration 
Manager)  Developer 

•  IT  Risk  Mgmt  Security  Architect 

•  Sun  One  /  Siteminder  Architect 

•  Business  Objects  /  Cognos 
Developers 

•  .NET  Architect 

All  positions  require  BS/MS  degree 
with  a  minimum  of  2  to  3  years  of 
experience  in  the  field.  Must  pos¬ 
sess  excellent  communication 
skills  as  well. 

NET2S,  82  Wall  Street,  Suite  400, 
New  York,  NY  10005;  Fax:  (212) 
279-1 960;  Phone  (212)  279-6565;  or 
Email:  jobus-ny@net2s,com 


Graphic  Designersfor  Sanborn, 
Inc.’s  Charlotte  Office:  Dsgn  & 
develop:  (1)  CAD  db  w / 
AutoCad  programming/Lisp 
routines,  MDL  tools  &  Micro- 
Station/WinNT  to  edit  GIS 
(Geographic  Info  Sys)  digital 
mapping  data;  (2)  image  pro¬ 
cessing  w/  Adobe  Photoshop 
imagery  sw  for  color  balance, 
contrast  enhanc’mt  &  pixel 
editing  to  clean  orthorectified 
digital  aerial  images,  &  collect 
seamline  for  image  mosaic  w/ 
Intergraph's  IRAS-C  &  Ortho- 
PRO;  (3)  customiz'n  routines  & 
automat’n  product’n  process. 
40h/wk,  8  to  5,  2  yr  wk  exp  in  job 
offered  or  in  any  posit’n  w/ 
Adobe  Illustrator  &  Photoshop 
req’d.  Resume  to  Gary  Eaton 
at  geaton@sanborn.comor  fax 
704-347-4515.  Only  US  workers 
defined  in  20  CFR  656.3  can 
apply. _ 


Software  Engineers  (2 
Openings):  For  co.  specializing 
in  mktg  &  mnfg  of  computer 
software,  responsible  for 
designing,  &/  implementing  key 
complex  product  enhance¬ 
ments/new  features.  Research 
new  feature's  concepts,  estab¬ 
lish  plans  &  coordinate  them; 
analyze  problems  &  suggest 
innovative  solutions;  design  & 
test  plans;  train  5  review 
design  work  of  programmers. 
Req's:  B.S  Deg,  or  equiv,  in 
Computer  Science,  Engin¬ 
eering  or  a  related  field.  4  yrs 
exp  in  job  offered  or  4  yrs  of 
programming  exp.  Exp  must 
incl  design,  analysis,  trou¬ 
bleshooting,  testing  &  support. 
Prof  in  C++,  Visual  C++,  Visual 
Basic,  SQL  Server  &  COM. 
40hrs/wk.  Send  res.  to  M-1, 
P.O.  Box  17182,  Phila.,  PA 
19105. 


PROGRAMMER  ANALYSTS 
req'd  for  Worth,  IL  office. 
Design  &  Develop  software 
applications  using  Oracle. 
XML,  UML,  C++,  Sybase, 
Interwoven,  Coolgen,  Clear- 
Case,  ClearQuest,  PVCS, 
UNIX.  Bachelors  req'd  in 
Computers,  Engineering,  math 
or  any  related  field  of  study  +2 
yrs  of  related  exp.  40  hrs/wk. 
Must  have  legal  authority  to 
work  permanently  in  the  U.S. 
Send  resume  to  HR  Manager, 
CPR  Enterprises,  Inc.,  7159 
West,  111th  St,  Worth,  IL 
60482 


Siebel  Consultant 
Design  and  implement  cus¬ 
tomized  Siebel  and  Customer 
Relationship  Management  solu¬ 
tions  for  clients.  Must  have 
Bachelors  Degree  in  Software 
Engineering  or  related  field  & 
two  years  of  experience  or  two 
years  of  experience  in  a  related 
position  w/ability  to  use:  Siebel 
at  all  stages  of  development, 
including  Siebel  EIM,  EAI  & 
Siebel  Architecture.  Must  be 
willing  to  travel.  40.0  hrs./wk 
9:00  AM  -  6:00  PM  Applicants 
send  cover  letter  and  resume  to: 
Cyber  Korp,  Inc.,  400  W.  Lake 
Street,  Roselle,  IL  60172.  Attn: 
Latha 


SAP  Project  Mgr.  -  sought  by  int'l 
freight  fwdg  co.  in  Miami,  FL. 
Req'd  to  design,  implement,  & 
coord,  installation  of  SAP  sys¬ 
tems.  Maintain/modify/integrate 
systems  for  operating  efficiency 
&  compatibility.  Troubleshoot  & 
update  IT  mgt  and  provide  end- 
user  support.  Must  have  Bach. 
Deg  or  equiv.  in  Comp.  Sci.  or  IT 
field  &  3  yrs  exp  in  job  offd  or  3 
yrs  rel.  exp  as  Sys  Analyst/ 
Admin.  Must  have  working 
knowledge  of  Informix,  UNIX, 
and  SAP  modules  Send 
resumes  to  Vincent  Kieffer,  IT 
Mgr.  LATAM,  Panalpina,  Inc., 
3505  NW  107th  Ave„  Miami.  FL 
33178. 


Z3  Technologies,  Inc.  a  fast 
Growing  software  firm  is  looking 
for  a  Computer  consultant: 
Should  have  bachelor's  degree 
in  computer  science/related  field 
with  2  years  experience  in 
Requirement  Analysis,  Design 
and  development  Resolving  the 
technical  issues  Programming 
in  Java,  J2ee,  Jsp,  Corba,  Rmi, 
C,  C++,  EJB.  XML  and 
Webiogic.  We  accept  foreign 
education  equivalent  of  the 
degree,  or  the  degree  equivalent 
in  education  and  experience 
Send  resume  to.  Z3 
Technologies,  Inc  1803 
Shepherd  Ct  335  Waukesha. 
WI-53186: 

resumes@z3tech.com 
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Computer  Laboratory  Coord¬ 
inator  sought  by  university  locat¬ 
ed  in  Denver,  CO  to  work  in 
Denver  to,  under  dose  supervi¬ 
sion.  engage  in  moderately 
complex  tasks  induding  admin¬ 
istering  Windows  NT.  Sun,  Linux 
and  DOS  servers,  and  depart¬ 
mental  website  Maintain  and 
repair  computer  workstations; 
maintain  and  coordinate  com¬ 
puter  labs  and  network-ready 
classrooms.  Coordinate  com¬ 
puter  software  budget  and  make 
purchases  as  necessary;  evalu¬ 
ate  and  recommend  purchases 
to  upgrade  computer  hardware 
and  network.  Design,  install  and 
maintain  LAN  networking 
resources  including  TCP/IP 
Provide  support  to  computer 
users  and  supervise  work  study 
students  in  computer  lab.  Work 
is  closely  monitored  by  Director 
of  Labs  for  the  Engineering 
Department.  Utilize  Pascal, 
Basic,  C.  PCTools.  Disk  Mana¬ 
ger  in  the  installing,  administer¬ 
ing  and  maintaining  the  servers, 
website  and  workstations. 
Requires  bachelor’s  in  computer 
science  or  computer  engineer¬ 
ing;  working  knowledge  of  main¬ 
taining  Windows  NT,  Sun,  Linux 
and  DOS  servers  and  worksta¬ 
tions;  of  designing  and  installing 
networks;  and  of  TCP/IP. 
Pascal.  Basic.  C,  PCTools.  and 
Disk  Manager.  M-F;8am-5pm; 
$47,000/yr.  Respond  by  resume 
to  Employment  Programs,  PO 
Box  46547,  Denver,  CO  80202 
and  respond  to  JON  CO 
5053813. 


SOFTWARE  ENGINEERS:  - 
Multiple  Openings.  Will  design, 
code  and  test  applications  on  a 
Windows  NT/2000  platform 
using  VC++.  Will  propose  net¬ 
work  design,  define  implementa¬ 
tion  processes,  troubleshoot 
potential  issues,  and  code  appli¬ 
cation  enhancements  to  support 
new  product  initiatives.  New 
development  projects  will 
include  building  COM  compo¬ 
nents  with  ADO,  XML,  and  C++ 
as  well  as  building  object-driven, 
web  based  GUI  using  HTML. 
DHTML,  XML.  C++  and  Java  on 
a  scalable,  multi-tier  architec¬ 
ture.  Requirements:  B.S.  (or 
equiv.)  in  CS,  MIS,  Electronic  or 
Electrical  Engineering  or  related 
and  two  (2)  years  of  experience 
in  the  job  offered  or  two  (2) 
years  experience  in  the  related 
occupations  of  Software 
Engineering,  Development,  or 
Programming.  Also,  demonstrat¬ 
ed  expertise  in  the  following:  (1) 
Design  and  development  skills 
using  C/C++  or  Java  VB;  (2) 
Development  in  Windows  oper¬ 
ating  system  including  server 
architecture,  services,  or  securi¬ 
ty  features;  and  (3)  Using  three 
or  more  of  RDBMS,  XML, 
ODBC,  ADO,  HTML/DHTML, 
COM/DCOM,  XSL(T),  Java. 
Offered  salary  is  $72, 500/year 
for  full-time  employment  (min. 
40  hours  per  week)  and  stan¬ 
dard  company  benefits.  EEO. 
Submit  2  resumes  in  response 
to  Case  Numbers  2002-02559  & 
2002-02560,  Labor  Exchange 
Office,  19  Staniford  Street,  1st 
Floor,  Boston,  MA  02114. 


Director  of 

Information  Technology 

Responsible  for  overall  direc¬ 
tion,  strategic  planning  and  exe¬ 
cution  of  IT  department  for  lead¬ 
ing  specialty  pharmaceutical 
company.  Evaluate  and  recom¬ 
mend  IT  initiatives  to  improve 
business  performance,  effec¬ 
tiveness  and  competitive  advan¬ 
tage  utilizing  in-depth  knowl¬ 
edge  of  corporate-wide  ERP 
systems,  IMS  Health  marketing 
data,  including  Xponent  and 
physician  databases,  Business 
Intelligent  solutions  (such  as 
COGNOS),  JDE  OneWorld  sys¬ 
tems  and  Sales  Force 
Automation  systems.  Utilize 
knowledge  of  pharmaceutical/ 
sales  marketing  strategies  and 
business  processes  to  work  with 
end  users  to  develop  functional 
and  technical  requirements  of  IT 
projects;  develop  and  manage 
IT  budgets  and  project  timelines; 
hire,  manage,  coach  and  devel¬ 
op  professional  IT  staff.  Manage 
FDA  regulatory  compliance  uti¬ 
lizing  knowledge  of  PDMA 
Sample  compliance  and  CFR  21 
part  11  regulations. 

Must  have  a  Master's  degree  or 
foreign  equivalent  in  Computer 
Science.  Engineering  or 
Business  and  at  least  five  years' 
experience  in  managing  IT  sys¬ 
tems  in  the  pharmaceutical 
industry.  Apply  to:  First  Horizon 
Pharmaceutical  Corporation, 
6195  Shiloh  Road,  Alpharetta, 
GA  30005 


ORALIE  LLC  has  openings 
for  Principal  Consultant  as 
Business  Analyst,  Project 
Manager,  Management  Con¬ 
sultant,  Software  Engineer. 
Must  possess  MS  degree  in 
CS,  Engineering  or  related 
field  or  BS  plus  5  years  of 
progressive  exp.  MBA  is  plus. 
Apply  with  salary  req  to:  431 
South  7th  St,  #2605, 
Minneapolis.  MN  55415  or 
1919  E  Birch  St,  #MM38 
Brea,  CA  92821  or  Email  to: 
iobs@oralie.com 


Senior  Application  Developer: 
Provide  production  support  of 
application  in  production  by  trou¬ 
bleshooting  issues,  proposing 
solutions,  developing  and  test¬ 
ing  fixes  and  migrating  solu¬ 
tions.  Ensure  that  all  program¬ 
ming  standards  and  policies  are 
adhered  to  in  development  of 
unit  tests  application  programs. 
Mentor  junior  developers  with 
code  reviews,  design  reviews 
and  unit  test  plan  reviews.  Add, 
maintain  and  extend  packaged 
application  components.  Work 
closely  with  functional  resources 
to  ensure  applications  are  fulfill¬ 
ing  the  company's  business 
requirements.  Requirements 
include  a  Bachelor's  degree  or 
equivalent  combination  of  edu¬ 
cation  and  work  experience  in 
Computer  Science,  an  Engin¬ 
eering  discipline  or  related  field 
and  two  years  of  experience  in 
the  job  offered  or  related  field  of 
database  development.  Appli¬ 
cants  must  have  unrestricted 
authorization  to  work  in  the 
United  States.  Salary  $75,000/ 
year.  40  hours/wk.  Respond 
with  two  copies  of  resume  to 
Case  #200202793,  Labor 
Exchange  Office.  19  Staniford 
St..  1st  FI.,  Boston,  MA  02114. 


Regional  Chief  Information 
Officer:  -  Sup.  &  prov.  support  to 
local  info  technology  managers 
in  the  design,  planning  &  imple¬ 
mentation  of  communications 
infrastructure  &  servers  req.  to 
run  credit  card  operations  of 
Visa  &  Master  cards.  Measure  & 
determine  possible  strategies  to 
optimize  supply  chain  from  the 
moment  a  credit  card  is  used  in 
a  local  point  of  saie  to  the 
moment  a  statement  is  printed 
to  be  mailed  to  customer.  Sup. 
security  of  info  being  charged  by 
using  encryption  Cisco  3Des 
among  other  technologies;  sup 
quality  of  service  of  satellite  net¬ 
work.  Prov.  communications 
channels  through  the  use  of 
Microsoft  products  (Word,  Excel, 
Outlook,  Power  Point,  Visio). 
Analyze  the  hardware  require¬ 
ments  of  the  different:  platforms 
based  Digital  Unix,  Microsoft  NT 
&  Oracle  40  hrs  per  wk  M-F 
9AM-6PM  BS  in  computer  engi¬ 
neering  &  1  yr  exp.  in  job 
offered  Fax  resume  to 
Technicard.  Inc  ATTN:  Marcio 
Baltondo  (305)  442-8616 


Systems  Analyst  for  Latin 
America  Banking  Institute 

-  Uses  system  skills  to  ana¬ 
lyze  Latin  Banking  systems 
&  business  req.,  designs  & 
dev.  software  programs  for 
integrated  systems  for  Latin 
American  Banks,  works  w/ 
IBM,  AS/400,  RPG,  ILE, 
interactive  systems  for  Latin 
American  banks.  40  hrs  per 
wk,  M-F  9AM-6PM.  2  yrs 
exp.  in  job  offered.  Fax 
resume  to  Datapro,  Inc.  Attn: 
William  Montiel,  Case  #02- 
1232  (305)377-3282. 


Programmer  Analyst. 
Install,  configure,  administer, 
tune  &  troubleshoot  Sybase 
Replication  Server  11.5,1  & 
SQL  servers  using  Async 
I/O.  Transfer  data  between 
servers  using  BCP.  Per¬ 
form  data  modeling-logical 
&  physical  design.  Req: 
Masters  in  Computer 
Science.  40  hr-wk.  Job 
/Interview  Site:  Irvine,  CA. 
Send  resume  to  Synertech, 
Inc.,  1100  Irvine  Blvd,  #493, 
Tustin,  CA  92780 


Software  Engineer, 
Biomedical  Research. 
Job  site:  Sylmar,  CA. 
Send  resume  to 
Second  Sight,  attn: 
Karen  Morris,  28460 
Avenue  Stanford, 
Suite  200,  Valencia, 
CA  91355. 


Database  Administrator/Analyst 
is  sought  by  a  manufacturer  of 
medical  devices  to  work  in 
Bartlett  to  provide  technical  & 
functional  support  to  QAD(MFG/ 
PRO)  ERP  system  using 
Progress  9.1,  QAD  MFG/PRO 
eB.  RDBMS  &  4GL.  Must  have 
BS  in  Comp  Sci.,  Eng,  or 
Physics  +  4  yrs  exp.  in  job  or  4 
yr.  related  exp.  in  Database 
Development  &  Maintenance. 
Related  exp.  must  include  6  mo. 
exp  in  MFG/PRO  eB,  Actuate, 
MS  Office  Suites,  JAVA  &  HTML. 
Send  resume  to  Gyrus  ENT, 
LLC,  2925  Appling  Rd.,  Bartlett, 
TN  38133,  Attn:  HR-RA.  EOE. 


Programmer  Analysts  for 
Peoria,  IL  office.  Design  & 
Develop  software  applications 
using  Oracle,  Erwin,  Inter¬ 
woven,  Coolgen,  XML,  UML, 
C++,  ClearCase,  ClearQuest, 
PVCS,  UNIX;  Bachelors  reqd  in 
Computers,  Engineering,  Math 
or  any  related  field  of  study  +  2 
yrs  of  related  exp.  40  hrs/wk. 
Must  have  proof  of  legal 
authority  to  work  permanently 
in  the  U  S.  Send  resume  to  HR 
Manager,  Redsalsa  Tech¬ 
nologies,  Inc.  14001. N  Dallas, 
Parkway.  #  550  Dallas,  TX 
75240 


Sr  Oracle  DB  Administrators 
needed  at  various  client  sites  to 
analyze  &  define  IT  strategy  for 
business  infrastructure  dvlpmt  & 
data  mgmt.  Dsgn,  dvip,  adminis¬ 
ter  &  coord  MSQL,  Oracle  & 
DB2;  migrate  Mainframe/Legacy 
DBs  to  client/server  N-tier  arch; 
configure  server  for  web  ser¬ 
vices;  customize/integrate/ 
implmt  Lawson  acctg  pkg; 
migrate  solutions  to  Oracle 
Financial.  Send  resume  to: 
Global  Consultants,  Attn: 
Hireme,  25  Airport  Rd, 
Morristown,  NJ  07960. 


IT  comp  with  head  office  in  NYC 
seeks  qualified  applicants  for  the 
following  positions:  Software 
Developers,  Sr.  Solutions 
Analyst,  Business  Analyst  and 
DBA.  Training/experience  with 
any  or  all  of  the  following: 
PowerBuilder,  Oracle,  SQL 
Server,  Sybase  PL/SQL,  .Net, 
Crystal  Reports.  Rational  Rose, 
Lotus  Notes/Domino.  VB,  ASP, 
JavaScript,  HTML,  DHTML, 
CSS,  XML,  Developer  2000, 
Java.  ERwin,  DBArtisan,  Visio, 
Great  Plains,  Toad.  MS  Project 
and  IIS.  Resumes  to  Vitech 
Systems  Group,  Inc.,  401  Park 
Ave  South,  NY,  NY  10016. 


Programmer-Analyst:  Improve 
system;  install  hardware/soft¬ 
ware;  analyze  operational  pro¬ 
cedures;  identify  problems;  pre¬ 
pare  reports/diagrams;  design/ 
modify  programs/applications  to 
automate  bookkeeping/report 
system.  40Hrs/Wk.  9:00  am  - 
5:00  pm  Req  Bachelor's  in 
comp  sci./comp.  prog./eng./ 
math  or  related  (Employer  will 
accept  foreign  deg  equiv  or 
equiv.  in  exp  or  any  comb,  of 
edu.  &  exp  )  +  2  yrs.  exp  in  job 
off.  or  2  yrs.  as  tech  consult/sys. 
oper.  or  related  field.  Resume  to: 
Aysha  Food,  Inc.  1735 
Lexington  Rd.,  Athens.  GA 
30605. 


System  Admins,  to  analyze, 
design/develop  appls  using 
Lotus  Notes,  Lotus  Script, 
JScript.  HTML,  XML,  Oracle, 
MS  SQL  Server,  etc.  under 
UNIX/Windows  OS;  install, 
administer/configure  Lotus 
Notes  R4/R5,  Domino  R6, 
Windows  NT;  maintain  backup, 
schedule  maintenance,  adminis¬ 
ter  user  accounts,  provide  user 
support  for  network  problems. 
Require:  B.S.  or  foreign  equiv  in 
CS/Engg(any  branch)  with  2  yrs 
exp  in  system  admin.  High 
Salary.  F/T.  Travel  involved. 
Resume  to:  HR,  Salem 
Associates,  Inc.,  405,  6th  Ave., 
Ste  102,  Des  Moines,  IA  50309. 


Web  Developers  needed.  Seeking 
qual.  candidates  possessing  BS 
or  equiv.  and  5  yrs.  relevant  exp. 
Part  of  the  req.  relevant  exp.  must 
include  1  year  working  with  in 
Visual  Age  for  Java,  CICS,  IBM 
APIs  &  WebSphere.  Duties 
include:  Develop  object  oriented 
Java  classes  using  IBM  Visual 
Age  for  Java  and  test  software 
applications  in  WebSphere  Test 
Environment;  Resolve  problems 
in  the  production  environment  as 
necessary;  Develop  technical 
specifications  &  Object  Oriented 
designs  to  meet  functional 
requirements.  Fwd.  resume,  ref.  & 
salary  req.  to  Ingram  Book,  Attn: 
HR/WD.  1  Ingram  Blvd.,  Mail  Stop 
458,  LaVergne,  TN  37086. 


PROJECT  MANAGERSAbbott 
Laboratories  in  Bedford,  MA 
seeks  qualified  Project 
Managers.  Bachelors  degree  in 
Computer  Science  or  related 
required  with  experience  in  soft¬ 
ware  architecture,  design  and 
development  based  on  Oracle 
database,  Forms  and  Reports. 
Salary  commensurate  with 
experience.  Multiple  openings 
available.  An  EOE.  Respond  by 
mail  to  Abbott  Laboratories, 
Dept.  323,  Bldg.  AP6D2,  100 
Abbott  Park  Road,  Abbott  Park 
IL  60064-32537.  MED-KE-3456. 


Z3  Technologies,  Inc.  a  fast 
Growing  software  firm  is  looking 
for  a  Computer  consultant: 
Should  have  bachelor's  degree 
in  computer  science/related  field 
with  2  years  experience  in 
Requirement  Analysis,  Design 
and  development.  Resolving  the 
technical  issues.  Programming 
in  Sybase.  SQL  Server,  VB 
Power  Builder,  PFC.  Oracle. 
Win2k,  WinNT  and  skilled  in 
Microsoft  software.  We  accept 
foreign  education  equivalent  of 
the  degree,  or  the  degree  equiv¬ 
alent  in  education  and  experi¬ 
ence  Send  resume  and  cover¬ 
ing  letter  to:  Z3  Technologies. 
Inc  1803  Shepherd  Ct  335 
Waukesha,  WI-53186; 
resumes@z3tech  com 
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Shopping  spree 


In  the  past  18  months  vendors  have  gone  the  acquisition  route  to  fill  out  their  utility 
computing  portfolios  with  automation,  storage  virtualization  and  business  process- 
driven  tools. 


Company 

What  it  bought 

What  it  got 

BMC 

IT  Masters 

Service  and  application  modeling  technology. 

HP 

Talking  Blocks 
Extreme  Logic 

Service-oriented  technology  that  tracks  business  processes. 
Software  that  deploys  solutions  based  on  Microsoft's  .Net. 

IBM 

Think  Dynamics 

Access360 

Holosofx 

Trellisoft 

Software-only  data  center  automation  capabilities  for 
heterogeneous  networks. 

Software  to  automate  the  provisioning  of  user  rights  and  privileges. 
Business  process  modeling  and  monitoring  tools. 

Multi-platform,  automated  storage  resource-management 
software. 

Sun 

CenterRun 

Terraspring 

Pirus  Networks 

Software  that  deploys  database,  Web  and  Java  applications 

across  servers. 

Automated  server  provisioning  software. 

Storage  virtualization  appliance. 

Veritas 

JarevaTechnologies 
Precise  Software 

Automation  software  for  server  provisioning. 

Application  performance  and  availability  management  software. 

Utility 

continued  from  page  1 

Late  last  year,  storage  vendor 
Veritas  spent  $537  million  on 
application  performance  man¬ 
agement  vendor  Precise  Software 
and  another  $62  million  for  auto¬ 
mated  server  provisioning  start¬ 
up  Jareva  Technologies. 

Acquisitions  aside,  IBM  has  said 
it  will  invest  about  $10  billion  to 
develop  utility  computing  tech¬ 
nology  in  the  next  few  years.  Sun 
too  anticipates  investing  $10  bil¬ 
lion  in  research  and  develop¬ 
ment,  acquisitions  and  other 
activities  over  the  next  five  years 
building  out  its  N1  strategy 
HP  says  its  acquisitions  will  fur¬ 
ther  its  Adaptive  Enterprise  strat¬ 
egy,  which  promises  to  provide 
corporations  with  intelligent 
software  to  manage  data-center 
resources  that  are  based  on 
changing  application  and  end- 
users’  needs. 

HP’s  utility  road  map  rivals  on- 
demand  plans  from  management 
competitors  BMC  Software  and 
IBM,  and  intelligent  data-center 
initiatives  from  Sun  and  Veritas. 
And  last  week  Microsoft  got  into 
the  fray  by  rolling  out  its 
Automated  Deployment  Services, 
which  supports  the  automatic 
and  simultaneous  installation  of 
Windows  2000  and  2003  imple¬ 
mentations  to  multiple  servers. 

Industry  watchers  say  vendors 
with  cash  on  hand  will  speed 
their  time  to  market  with  acquisi¬ 
tions  instead  of  building  new 
technology  in-house.  Yet  despite 
all  the  buying  activity  and  vendor 
claims  of  utility  computing  gains, 
industry  watchers  say  it’s  too  soon 
to  tell  if  the  technology  invest¬ 
ments  will  guarantee  success. 

“Companies  like  HP  IBM  and 
Sun  have  deep  pockets,  and, 
unfortunately  for  the  small  ven¬ 
dors,  there  are  a  lot  of  good  bar¬ 
gains  right  now,”  says  Glenn 
O’Donnell,  a  research  director 
with  Meta  Group. 

“HP  added  a  small  piece  to  its 
adaptive  puzzle,  but  no  one  has 
nailed  down  utility  computing 
entirely  yet. They  are  all  working 
to  get,  and  stay,  ahead  of  the 
pack,"  he  adds. 

Forrester  Research  and  Gartner 
in  separate  reports  put  HP  neck- 
and-neck  with  IBM  in  terms  of 
their  utility  computing  offerings 
•nd  potential  to  deliver  products. 
Other  companies  in  the  utility¬ 
computing  competition  include 
BMC'  Computer  Associates  and 
Micioniuse.each  of  which  makes 
network  and  systems  manage- 
ment  software.  Microsoft’s  and 
Sun’s  plans  tall  further  behind  the 


management  vendors,  in  part 
because  Sun’s  focus  is  on  manag¬ 
ing  its  servers  and  Microsoft’s 
strengths  lie  primarily  in  manag¬ 
ing  its  own  systems. 

Because  the  utility  computing 
model  could  require  customers 
to  invest  in  new  hardware,  soft¬ 
ware  and  systems  integration, 
many  of  them  are  wary  of  the 
technology 

Companies  such  as  Price¬ 
line.com  in  Norwalk,  Conn.,  see 
utility  computing  becoming  a 
reality  in  their  own  data  centers, 
just  not  yet.  Priceline  CIO  Ron 
Rose  uses  automated  server  con¬ 
figuration  and  provisioning  soft¬ 
ware  from  start-up  BladeLogic.  He 
says  this  type  of  automation 
across  heterogeneous  networks  is 
the  precursor  to  larger  utility¬ 
computing  plans. 

“I  believe  that  a  true  utility  com¬ 
puting  model  would  turn  the 
overall  data  center  into  one  big 
data-center  operating  system,” 
Rose  says.  “So  the  first  step  is 
make  multiple  servers  appear 
consistent  to  the  management 
software.” 

Andy  Davies-Coward,  chief  cre¬ 
ative  officer  and  co-founder  of 
422,  an  animation  company  in 
Bristol,  England,  says  he  couldn’t 
deploy  utility  computing  across 
his  network. 

“A  company  like  422  cannot 
afford  to  buy  and  deploy  this 
type  of  computing  power  in- 
house,”  he  says.  He’s  using  HP’s 
Utility  Data  Center  (UDC)  on  a 
test  basis  provided  by  HP  Labs. 
"HP  provided  the  client  software, 
but  outside  of  that,  we’re  not 
touching  the  technical  part  of 
UDC,"  he  says.  UDC,  available  as 


stand-alone  software  or  as  a  host¬ 
ed  service,  provides  automated 
management  and  resource  allo¬ 
cation  features  but  lacks  the 
application  intelligence  to  deliver 
true  utility  computing. 

Vendors  would  seem  to  agree 
with  Priceline’s  Rose.  IBM,  Sun 
and  Veritas  each  grabbed  an 
automated  server  provisioning 
vendor  and  announced  plans  to 
integrate  the  technology  into 
their  offerings. 

IBM  last  week  introduced  its 
Project  Symphony  strategy  to 
deliver  utility  computing  with  the 
help  of  technology  from  its  Think 
Dynamics  acquisition.  That  buy¬ 
out  added  automated  server  pro¬ 
visioning  software  to  Big  Blue’s 
Tivoli  software  division. 

This  type  of  technology  can  be 
used  to  manage  multi-platform 
servers  with  standard,  repeatable 
methods  and  reduce  the  num¬ 
ber  of  administrators  required  to 
manage  servers.  In  theory,  auto¬ 
mated  server  provisioning  would 
let  a  utility-computing  data  cen¬ 
ter  roll  out  a  new  server  if  the 
load  on  existing  servers  threat¬ 
ened  to  negatively  affect  applica¬ 
tion  performance. 

HP  chose  to  partner  with 
Opsware  for  this  capability,  but 
industry  watchers  speculate  the 
partnership  could  develop  into 
another  acquisition. 

But  with  its  recent  acquisition 
of  Talking  Blocks,  HP  says  it  will 
address  a  different  utility-comput¬ 
ing  shortcoming:  complex  appli¬ 
cation  management.  Making 
sense  of  and  putting  to  use  appli¬ 
cation  performance  data  collect¬ 
ed  across  data  center  compo¬ 
nents  remains  elusive  to  most 


management  software  makers, 
Meta’s  O’Donnell  says.  Part  of  the 
problem  is  the  complexity  built 
into  applications,  which  vary  in 
the  technologies  they  use  from 
.Net  to  Java  to  XML. 

“In  terms  of  application  devel¬ 
opment,  management  is  an  after¬ 
thought,  so  there  is  no  standard 
way  to  collect  management  data 
and  get  a  read  on  the  behavior  of 
applications,”  O’ Donnell  says. 

Only  recently  have  companies 
such  as  Entuity,  Mercury  Inter¬ 
active  and  Opnet  started  to  track 
and  record  the  paths  an  applica¬ 
tion  takes  when  fulfilling  an  end- 
user  request.  Because  utility¬ 
computing  vendors  propose  to 
help  companies  first  align  busi¬ 
ness  applications  with  the  IT 
infrastructure  and  manage  the 
network  to  support  and  optimize 


■  Network  World  118  Turnpike  Road, 
Southborough,  MA  01772-9108,  (508)  460-3333. 


Periodicals  postage  paid  at  Southborough. 
Mass.,  and  additional  mailing  offices.  Posted 
under  Canadian  International  Publication  agree¬ 
ment  #40063800.  Network  World  (ISSN  0887-7661) 
is  published  weekly,  except  for  a  single  combined 
issue  for  the  last  week  in  December  and  the  first 
week  in  January  by  Network  World.  Inc..  118 
Turnpike  Road.  Southborough,  MA  01772-9108. 

Network  World  is  distributed  free  of  charge  in 
the  U.S.  to  qualified  management  or  professionals. 

To  apply  for  a  free  subscription,  go  to  www.sub- 
scribenw.com  or  write  Network  World  at  the 
address  below.  No  subscriptions  accepted  with¬ 
out  complete  identification  of  subscriber’s  name, 
job  function,  company  or  organization.  Based  on 
the  information  supplied,  the  publisher  reserves 
the  right  to  reject  nonqualified  requests. 
Subscriptions:  1-508-490-6444. 

Nonqualified  subscribers:  $5.00  a  copy;  U.S.  - 
$129  a  year;  Canada  $160.50  (including  7%  GST. 
GST#126659962);  Central  4  South  America  - 
$150  a  year  (surface  mail);  Europe  $205  a  year 
(surface  mall),  all  other  countries  $300  a  year 
(airmail  service).  Four  weeks  notice  is  required 
for  change  of  address.  Allow  six  weeks  for  new 
subscription  service  to  begin.  Please  include 
mailing  label  from  front  cover  of  the  Publication. 


application  performance,  it  is 
critical  that  vendors  get  a  handle 
on  how  applications  use  the 
infrastructure. 

For  its  part,  HP  says  Talking 
Blocks’ service-oriented  architec¬ 
ture  technology,  which  manages 
the  relationships  between  ser¬ 
vices  and  end  users,  will  be  inte¬ 
grated  into  HP’s  OpenView  man¬ 
agement  software  portfolio.  It 
also  will  provide  network  man¬ 
agers  with  integrated,  correlated 
data  from  disparate  manage¬ 
ment  sources.  OpenView  then 
would  feed  the  intelligent  appli¬ 
cation  performance  manage¬ 
ment  data  into  HP’s  UDC,  which 
could  take  automated  actions  to 
reallocate  network  and  storage 
resources  based  on  demand. 

“Talking  Blocks  could  help 
OpenView  collect  all  this  various 
application  information  and  bet¬ 
ter  assimilate  the  data  and  better 
communicate  it  with  other  appli¬ 
cations  such  as  UDC,”  says  Ste¬ 
phen  Elliot,  an  analyst  at  IDC. 

He  says  HP  and  other  vendors 
fighting  to  gain  utility-computing 
ground  will  have  to  wait  for  a  user 
community  interested  in  these 
products,  and  only  following  that 
could  a  market  leader  emerge. 
Industry  watchers  and  vendors 
agree  it  will  be  another  three  to 
five  years  before  complete  utility 
computing  data  centers  emerge 
and  it  could  take  as  many  as  10 
years  before  there  is  widespread 
customer  adoption. 

“The  vendors  are  really  battling 
for  an  uncertain  future,”  Elliot 
says.  “But  utility  computing  does 
have  them  taking  stock  of  what 
technology  they  have  and  filling 
gaps  where  they  need  to."  ■ 
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m  new  practices  in  managing  and  modifying  the 
data  center 

■  new  paths  to  consolidating  server  and 
storage  resources 

■  new  ways  to  maximize  resources  through  virtual¬ 
ization  and  automation 

■  new  techniques  for  managing  mixed 
operating  system  environments 

■  new  strategies  for  implementing  SLM  and  moni¬ 
toring  SLAs 

■  new  applications  that  take  advantage  of  data 
center  infrastructure 
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continued  from  page  1 

“ADS  is  a  small  piece  of  DSI,  but  Microsoft 
is  headed  in  the  right  direction,”  says  Paul 
Wimmer,  lead  system  developer  for 
Rackspace.  A  San  Antonio,  Texas,  company 


that  hosts  servers  for  corporate  customers. 
Wimmer  used  ADS  to  replace  some  home¬ 
grown  scripts  for  automated  deployment  of 
the  Windows  operating  system,  which 
shaved  40  minutes  off  the  time  it  takes  to 
roll  out  a  server.  “Anything  that  means  our 
administrators  have  to  touch  our  servers 


less  and  makes  us  more  efficient,  we  are  all 
for  it,”  he  says. 

Wimmer  says  he  is  on  track  to  roll  out  DSI 
as  it  evolves  and  he  hopes  it  makes  his 
Windows  environment  easier  to  manage. 

The  road  to  DSI,  however,  is  a  long  one. 

“Microsoft  is  trying  to  develop  a  manage¬ 


ment  mindset  with  its  utility  model,  but  a 
lot  of  the  pieces  are  missing,"  says  Audrey 
Rasmussen,  vice  president  of  research  for 
Enterprise  Management  Associates.  One  of 
those  pieces  is  support  for  non-Windows 
platforms.  “There  is  a  lot  of  functionality 
that  you  need  in  managing  the  network, 
managing  servers,  capacity  planning,  and 
when  you  move  to  the  utility  model  the  link 
between  those  management  systems  will 
be  more  critical.  It  all  has  to  be  integrated. 
Microsoft  will  start  to  get  there  as  they 
develop  SDM.” 

SDM  is  the  System  Definition  Model  and 
is  DSI's  linchpin. 

SDM  is  an  XML-based  technology  Micro¬ 
soft  will  build  into  applications,  the  operat¬ 
ing  system  and  management  tools.  SDM 
would  let  those  three  elements  communi¬ 
cate  among  themselves  about  management 
issues  and  to  understand  the  dependencies 
among  applications,  hardware  and  network 
capacity  for  systems  to  run  correctly 

“Each  vendor  is  addressing  this  manage¬ 
ment  model  in  a  different  way  but  the 
desire  is  to  drive  out  cost  and  complexity’ 
says  Bob  O’Brien,  product  manager  for  Win 
2003.“We  are  taking  the  life-cycle  approach 
from  design  to  deployment  to  operation. 
ADS  helps  address  the  deploy  and  opera¬ 
tions  piece.” 

ADS,  which  is  based  on  the  SDM  model,  is 
the  second  release  under  the  DSI  banner. 
The  first  was  the  Windows  System  Re¬ 
source  Manager  that  was  part  of  Win  2003. 

ADS  is  aimed  at  easing  the  rollout  of  the 
Windows  operating  system  on  servers  by 
creating“images”or  configurations  that  can 
be  installed  simultaneously  on  multiple 
computers. The  free  tool  is  run  from  a  cen¬ 
tral  console  and  “listens”  for  new  servers 
that  advertise  themselves  on  the  network. 
ADS  installs  an  agent  that  helps  get  the 
operating  system  up  and  running.  After  the 
install,  the  agent  can  be  used  for  adminis¬ 
trative  duties,  such  as  configuring  a  server 
to  join  a  cluster. 

ADS,  which  began  as  a  project  within 
Microsoft  Research,  has  been  under  devel¬ 
opment  for  nearly  three  years  and  has  been 
beta-tested  by  150  customers  since  March. 

Company  officials  say  the  next  step 
under  DSI  will  come  at  year-end  with  the 
release  of  virtual  server  technology 
derived  from  the  acquisition  of  Connectix 
in  March. The  technology  will  be  married 
with  ADS  to  let  users  provision  virtual 
servers  on  one  box.  In  mid-2004,  the  com¬ 
pany  plans  to  combine  its  Microsoft 
Operations  Manager,  an  event  and  perfor¬ 
mance  monitoring  tool,  and  System 
Management  Server  into  a  product  called 
System  Center,  which  would  provide  tools 
to  manage  desktops,  laptops,  PDAs,  appli¬ 
cations  and  servers. 

Microsoft  also  says  it  will  begin  to  add 
tools  for  change  and  configuration  man¬ 
agement,  asset  management,  application 
management,  IT  process  orchestration,  per¬ 
formance  trending,  reporting  and  capacity 
planning.  ■ 
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An  open  letter  to  recent  SCO  Linux  licensees 

D 


ear  recent  SCO  Linux  licensee, 
Were  you  that  afraid  of  litiga¬ 
tion  that  you  bought  a  license 
for  Linux  from  The  SCO  Group?  I’m 
sorry,  but  that  is  pathetic. 

Yes,  it  might  be  only  $700  per 
processor  and  perhaps  you  think 
that’s  better  than  paying  the  $1,400 
license  fee  that  SCO  threatens  after  Oct.  15.  Or 
maybe  you  purchased  it  because  you’re  afraid  that 
you  might  have  to  pay  damages  of  some  kind 
should  SCO  prevail  in  its  suit  against  IBM. 

Do  you  realize  that  what  you  have  done  is  given  in 
to  blackmail?  At  first  I  was  going  to  classify  what 
SCO  is  doing  as  highway  robbery  but  highway  rob¬ 
bery  is  at  least  more  honest.  In  highway  robbery  the 
robbers  show  you  the  weapon  when  they  threaten 
you.  Blackmailers  are  far  more  underhanded  —  they 
simply  threaten  you  with  what  they  claim  they  will 
do  if  you  don’t  cough  up. 

And  you  gave  in  to  it!  Let’s  look  at  this  carefully  For 
a  start,  if  you  are  using  Linux  and  it  turns  out  to  be 
illegal,  it  is  like  reading  a  photocopied  book.  Read¬ 
ing  it  is  not  illegal  —  it  was  the  copying  and  distribu¬ 
tion  that  was  illegal. 

And  that’s  not  my  argument,  that’s  the  very  well 
informed  legal  opinion  of  Eben  Moglen.a  professor 
at  Columbia  Law  School  and  general  counsel  for 


the  Free  Software  Foundation. 

In  Moglen’s  recent  paper, “Questioning  SCO:  A 
Hard  Look  at  Nebulous  Claims”  (www.nwfusion. 
com,  DocFinder:  7542),  he  writes: “the  Copyright 
Act  doesn't  grant  the  copyright  holder  the  exclu¬ 
sive  right  to  use  the  work;  that  would  vitiate  the 
basic  idea  of  copyright. . . .  Software  users  are 
sometimes  confused  by  the  prevailing  tendency  to 
present  software  products  with  contracts  under 
shrink-wrap;  in  order  to  use  the  software  one  has 
to  accept  a  contract  from  the  manufacturer.  But 
that’s  not  because  copyright  law  requires  such  a 
license. This  is  why  lawsuits  of  the  form  that  SCO 
appears  to  be  threatening  —  against  users  of  copy¬ 
righted  works  for  infringement  damages  —  do  not 
actually  happen.” 

And  Moglen  is  not  alone  with  this  opinion. 
Lawrence  Rosen,  general  counsel  for  the  Open 
Source  Initiative,  writes  in  his  paper  “Q&A  re:  SCO 
vs.  IBM”  (DocFinder:  7543):  “Assume  the  very  worst: 
Assume  SCO  wins  its  case  against  IBM  and  IBM 
writes  a  big  check  for  damages.  Assume  SCO 
proves  that  some  portion  of  Linux  is  a  copy  or 
derivative  work  of  its  trade  secret  software.  Assume 
SCO  gets  an  injunction  to  prevent  anyone  from 
using  any  version  of  Linux  containing  infringing 
code. . . .  Long  before  that  happens  there  will  be  a 
new  open  source  version  of  Linux  omitting  any 


SCO  code. . .  .The  SCO  vs.  IBM  lawsuit  is  not  likely 
to  have  any  real  impact  on  Linux  users.  It  is  a  bat¬ 
tle  of  big  companies  that  will  be  resolved  in  due 
course  by  the  court,  perhaps  by  the  payment  of 
money.  In  the  meantime,  and  forever,  Linux  is  avail¬ 
able  for  free.” 

And  how  about  the  code  in  question?  So  far  the 
code  that  has  been  shown  has  either  been  put  in 
front  of  people  who  aren’t  qualified  to  make  a  judg¬ 
ment  (although  in  many  cases  they  don’t  seem  to 
have  held  back  even  so)  or  has  been  shown  to  be 
irrelevant  to  the  case.  See  “Analysis  of  SCO’s  Las 
Vegas  Slide  Show”  (DocFinder:  7544)  by  Bruce 
Fterens  about  the  SCO  presentation  shown  in  Las 
Vegas  on  Aug.  18. 

As  if  that  isn’t  enough,  you  have  got  to  check  out 
“SCO’s  evidence  of  copying  between  Linux  and 
UnixWare”  by  Greg  Lehey  (DocFinder:  7545),  a 
detailed  analysis  of  the  Las  Vegas  Slide  Show  code. 
There’s  no  gun,  smoking  or  otherwise,  to  be  found. 

So  what  you  chaps  have  done,  of  your  own  free 
will,  is  give  in  to  the  demands  of  blackmailers  who 
only  threatened  you  and  never  actually  displayed 
their  weapons.  Sure,  it  was  a  cheap  and  safe  course, 
but  was  it  smart  or  necessary? 

Yours, 

Mark  Gibbs,  backspin@gibbs.com. 


et 


Buzz 


News,  insights,  opinions  and  oddities 


By  Paul  McNamara 


Readers  get  another  turn 

What  does  it  say  about  the  state  of 
e-mail  that  finding  850  messages  in  my 
in-box  after  a  two-week  vacation  had  me  thankful  the  pile  was  so  small? 

It  says  my  company's  new  spam  filters  are  doing  a  good  job.  And  it  also  says  the 
definition  of  small  has  changed  over  the  years. 

What  hasn't  changed  is  the  commitment  here  to  letting  Buzz  readers  see  their 
own  views  in  print,  so  let's  shake  out  a  few  virtual  envelopes: 

My  defense  of  a  Supreme  Court  decision  holding  public  libraries  responsible  for 
using  filters  to  keep  Internet  smut  from  kids  was  not  met  kindly  by  a  number  of 
readers. 

“No,  the  filters  don’t  work,"  writes  Joe  Preston.  “The  best  filters  indiscrimi¬ 
nately  block  Web  pages  that  even  you  or  your  buddies  on  the  Supreme  Court 
would  judge  to  be  innocuous,  and  that  is  censorship.  Even  worse,  it's  government 
taking  the  responsibility  for  good  judgment  out  of  the  hands  of  librarians,  really 
the  best  people  to  judge  what's  appropriate  for  libraries,  and  putting  it  into  the 
hands  of  software  companies." 

The  trouble  is  that  too  many  librarians  have  already  proven  themselves  irre¬ 
sponsible  on  this  matter,  which  a  few  readers  recognized. 

Thanks  for  your  piece  on  Internet  filters,"  writes  David  Mash.  “I’m  one  of  those 
rare  librarians  who  agrees  with  you!" 

An  .tern  lamenting  the  apparent  advent  of  Internet  voting  turned  up  this  objec¬ 
tion  to  the  practice: 

Under  the  current  system  it  is  possible  to  buy  someone's  vote  (as  in  I’ll  give 
you  $5  to  vote  for  me)  but  there  is  no  way  of  knowing  if  they  stay  bought,"  writes 
MFa  Kenworthy.  '  After  all,  the  seller  could  still  go  into  the  voting  booth  and  pick 
someone  else  and  there  would  be  no  way  of  checking  up  on  the  purchase. 
However,  introduce  the  Internet  and  it  becomes,  ‘I’ll  give  you  $5  for  your  voting 


password.'  Now  the  buyer  is  assured  of  getting  the  vote  because  the  buyer  casts 
it.  Elections  will  be  directly  bought.” 

Another  recent  Buzzlet  scoffed  at  an  online  survey  in  which  three-quarters  of 
the  respondents  claimed  never  to  have  used  e-mail  to  criticize  a  boss.  Liars,  I 
called  'em. 

“I  want  to  take  issue  with  your  conclusion  regarding  the  poll,”  counters  Mark 
Heider.  "I  don’t  think  it  takes  a  saint  to  refrain  from  writing  critically  about  superi¬ 
ors  via  e-mail.  It  only  takes  someone  who  understands  the  nature  of  e-mail,  and 
the  Pandora's  box  it  can  open.  Once  you  hit  the  send  button,  you  lose  control  of 
that  message  and  those  who  might  see  it." 

A  column  bemoaning  the  unwillingness  of  'Net  users  to  pay  for  online  content 
brought  this  explanation  from  a  reluctant  buyer. 

"My  fundamental  problem  with  paying  for  online  content  is  that  it  is  inconvenient 
to  store  and  refer  to  later,”  writes  Paul  Erling.  "Providers  would  like  to  view  infor¬ 
mation  as  only  temporarily  available,  and  as  equally  valuable  as  more  permanent 
formats  (CDs,  magazines,  books).  It  isn't  anywhere  near  as  valuable  to  me  if  I 
can’t  easily  receive  a  copy  to  refer  to  later.” 

While  most  of  you  backed  my  rant  about  DARPA’s  short-lived,  online  anti-ter¬ 
rorism  betting  parlor —  dubbed  the  Policy  Analysis  Market  (PAM)  —  a  handful 
did  attempt  to  defend  the  idea. 

"You  do  the  program  an  injustice,"  writes  Chad  Cloman.  “From  a  purely  objec¬ 
tive  point  of  view,  it  had  a  good  chance  of  accurately  predicting  potential  terrorist 
activities.The  primary  objection  was  not  the  program’s  effectiveness;  rather,  it 
was  the  morbid  nature  of  the  endeavor.  It  failed  because  it  offended  the  sensibili¬ 
ties  of  the  American  public." 

He’s  wrong  about  the  injustice  but  dead-on  with  the  other  points.  PAM  might 
well  have  paid  intelligence  dividends,  and  it  did  die  —  deservedly  so  —  because  it 
offended  the  sensibilities  of  virtually  everyone. That’s  a  good  thing,  not  a  bad  one. 

Fill  'er  up.  The  address  is  buzz@nww.com. 


An  increasingly  mobile  workforce 
opens  your  network  up  to  a  host  of  threats; 
both  accidental  and  intentional. 

Bring  'em  on. 


The  only  place  to  securely  meet  the  challenges  that  a  mobile 
workforce  brings  to  a  network  is  at  the  point  where  people  connect. 
The  HP  ProCurve  Adaptive  EDGE  Architecture  affordably  puts 
intelligence  and  control  at  the  edge  of  the  network,  giving  you  the 
power  to  easily  adapt  to  future  needs  as  new  wired  and  wireless 
mobility  solutions  are  implemented. 

With  industry-standard  switches  like  the  HP  ProCurve  5300x1  series, 
you  can  cost-effectively  deploy  user  and  security  applications  at  the 
point  of  connection.  It  immediately  recognizes  the  user  and  the  types 
of  services  and  access  they  are  permitted  to  have,  preventing 
unauthorized  traffic  and  potential  threats. 

Free  Network  Design.  To  schedule  a  free  network  design  and  to 
learn  how  HP  ProCurve's  affordable  solutions  can  help  you  meet 
current  and  future  needs  for  mobility,  security  and  convergence, 
call  1-800-975-7683  or  visit  hp.com/go/procurve. 


hp  procurve 
5372x1 
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Router  with 
firewall,  VPN  and 


T1 DSU/CSU 


The  NetVanta"  3305  from  ADTRAN 


Dare  to  Compare! 

NetVanta 

3305 

Industry-Leading 

Brand 

Stateful  Inspection  Firewall 

✓ 

$$$ 

Dual  Network  Interfaces 

✓ 

$$$ 

Dual  Ethernet  Interfaces 

✓ 

$$$ 

Command  Line  Interface  (CLI) 

✓ 

✓ 

Unlimited  Telephone  Support 

✓ 

$$$ 

Free  Maintenance  Releases 

✓ 

Not  Available 

Virtual  Private  Networking 

s 

$$$ 

Dial  Backup 

$ 

$$$ 

PBX  Connectivity 

$ 

$$$$$ 

Warranty 

5  Year 

1  Year 

Uncompromising  quality.  Affordable  price.  There's  no  better  value 
in  access  routers  than  the  NetVanta  3000  Series  from  ADTRAN. 


For  some  time  now,  you’ve  been  buying  access  routers  a 
certain  way.  Perhaps  without  giving  it  a  second  thought. 

Now  there’s  good  reason  to  look  around — the  NetVanta  3000 
Series  from  ADTRAN.  These  routers  do  the  same  work  as 
other  brand  name  routers,  at  a  cost  that’s  up  to  55  percent 
less.  Designed  with  a  familiar  CLi,  NetVanta  3000  Series  routers 
fit  seamlessly  into  existing  operations.  No  costly  training  or 
recertification.  Built  to  ADTRAN  quality  standards,  this 
low-cost  alternative  is  backed  by  a  5-year  warranty  and 
free  pre-  and  post-sales  telephone  technical  support. 

Why  pay  more? 


Take  the  CLI  Challenge!  Receive  a  free  T-Shirt! 

www.adtran.  com/info/why  pay  more 


877.767.6022  Technical  Questions 
877.280.8416  Where  to  Buy 


Experts  choose  ADTRAN? 


AdIraFi 


